NTFS Folder permissions create files but not subfolders

Hello.

I have a folder (FolderA). What permissions do I need to set on it so that Domain Users can create and edit files in the folder, but not create subfolders? Domain Admins will obviously have full access to do whatever they like.

Is this possible?

Thanks in advance
ttt_drAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JuniorMemberCommented:
Try:

File and folder special permissions
 - Create Files/Write Data
 - Create Folders/Append Data
 - Delete Subfolders and Files

Create Folders/Append Data
The Create Folders permission applies only to folders and allows or denies the user from creating folders in the folder.

Create Folders/Append Data
The Create Folders permission applies only to folders and allows or denies the user from creating folders in the folder.
The Append Data permission applies only to files and allows or denies the user from making changes to the end of the file but not from changing, deleting, or overwriting existing data .


Delete Subfolders and Files
The Delete Subfolders and Files permission applies only to folders and allows or denies the user from deleting subfolders and files, even if the Delete permission is not granted on the subfolder or file.





Ref:
http://www.ntfs.com/ntfs-permissions-file-advanced.htm
http://support.microsoft.com/kb/308419
http://www.google.com/search?q=folder+permissions+to+create+files+not+subfolders
0
ttt_drAuthor Commented:
Nope, no luck with that.

Currently the folder has the following permissions:

Domain Admins - Full Control
Domain Users - Special. Create Files / Writes Data - Allow. Create Folders / Append Data - Allow. Delete Subfolders and Files - Allow. Nothing else.

No permissions inherited.
0
GoBieNCommented:
(domain users) Create Folders / Append Data - Allow

--> Shouldn't you set this to deny to achieve your goal ?
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

Kevin HaysIT AnalystCommented:
X2 !  If you select a deny on the root folder that are you assigning permissions to and select the domain user group, either uncheck that or just deny that permission (this folder, subfolders and files) then it should work.  I just tested it out on my system and it gave the result you were looking for.
 
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ttt_drAuthor Commented:
Hello,

I now have:
Domain Admins - Full Control
Domain Users - Special. Create Files / Writes Data - Allow. Create Folders / Append Data - Deny. Delete Subfolders and Files - Allow. Nothing else.

This sort of works as expected as in a domain user can create new files, but not new folders. However they cannot edit any of the new files that they put in that folder. E.g they can right click and create a new text document for examples, but if they then double click it and try to save it into the folder they get permission denied.

Thanks for the help!

 
0
GoBieNCommented:
When you set the "Create Folders / Append Data - Deny" choose to only apply to this Folder.
When you do that, users can't make sub folders, but can write to existing files.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.