Link to home
Start Free TrialLog in
Avatar of ttt_dr
ttt_dr

asked on

NTFS Folder permissions create files but not subfolders

Hello.

I have a folder (FolderA). What permissions do I need to set on it so that Domain Users can create and edit files in the folder, but not create subfolders? Domain Admins will obviously have full access to do whatever they like.

Is this possible?

Thanks in advance
Avatar of JuniorMember
JuniorMember

Try:

File and folder special permissions
 - Create Files/Write Data
 - Create Folders/Append Data
 - Delete Subfolders and Files

Create Folders/Append Data
The Create Folders permission applies only to folders and allows or denies the user from creating folders in the folder.

Create Folders/Append Data
The Create Folders permission applies only to folders and allows or denies the user from creating folders in the folder.
The Append Data permission applies only to files and allows or denies the user from making changes to the end of the file but not from changing, deleting, or overwriting existing data .


Delete Subfolders and Files
The Delete Subfolders and Files permission applies only to folders and allows or denies the user from deleting subfolders and files, even if the Delete permission is not granted on the subfolder or file.





Ref:
http://www.ntfs.com/ntfs-permissions-file-advanced.htm
http://support.microsoft.com/kb/308419
http://www.google.com/search?q=folder+permissions+to+create+files+not+subfolders
Avatar of ttt_dr

ASKER

Nope, no luck with that.

Currently the folder has the following permissions:

Domain Admins - Full Control
Domain Users - Special. Create Files / Writes Data - Allow. Create Folders / Append Data - Allow. Delete Subfolders and Files - Allow. Nothing else.

No permissions inherited.
(domain users) Create Folders / Append Data - Allow

--> Shouldn't you set this to deny to achieve your goal ?
ASKER CERTIFIED SOLUTION
Avatar of Kevin Hays
Kevin Hays
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ttt_dr

ASKER

Hello,

I now have:
Domain Admins - Full Control
Domain Users - Special. Create Files / Writes Data - Allow. Create Folders / Append Data - Deny. Delete Subfolders and Files - Allow. Nothing else.

This sort of works as expected as in a domain user can create new files, but not new folders. However they cannot edit any of the new files that they put in that folder. E.g they can right click and create a new text document for examples, but if they then double click it and try to save it into the folder they get permission denied.

Thanks for the help!

 
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial