ttt_dr
asked on
NTFS Folder permissions create files but not subfolders
Hello.
I have a folder (FolderA). What permissions do I need to set on it so that Domain Users can create and edit files in the folder, but not create subfolders? Domain Admins will obviously have full access to do whatever they like.
Is this possible?
Thanks in advance
I have a folder (FolderA). What permissions do I need to set on it so that Domain Users can create and edit files in the folder, but not create subfolders? Domain Admins will obviously have full access to do whatever they like.
Is this possible?
Thanks in advance
ASKER
Nope, no luck with that.
Currently the folder has the following permissions:
Domain Admins - Full Control
Domain Users - Special. Create Files / Writes Data - Allow. Create Folders / Append Data - Allow. Delete Subfolders and Files - Allow. Nothing else.
No permissions inherited.
Currently the folder has the following permissions:
Domain Admins - Full Control
Domain Users - Special. Create Files / Writes Data - Allow. Create Folders / Append Data - Allow. Delete Subfolders and Files - Allow. Nothing else.
No permissions inherited.
(domain users) Create Folders / Append Data - Allow
--> Shouldn't you set this to deny to achieve your goal ?
--> Shouldn't you set this to deny to achieve your goal ?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hello,
I now have:
Domain Admins - Full Control
Domain Users - Special. Create Files / Writes Data - Allow. Create Folders / Append Data - Deny. Delete Subfolders and Files - Allow. Nothing else.
This sort of works as expected as in a domain user can create new files, but not new folders. However they cannot edit any of the new files that they put in that folder. E.g they can right click and create a new text document for examples, but if they then double click it and try to save it into the folder they get permission denied.
Thanks for the help!
I now have:
Domain Admins - Full Control
Domain Users - Special. Create Files / Writes Data - Allow. Create Folders / Append Data - Deny. Delete Subfolders and Files - Allow. Nothing else.
This sort of works as expected as in a domain user can create new files, but not new folders. However they cannot edit any of the new files that they put in that folder. E.g they can right click and create a new text document for examples, but if they then double click it and try to save it into the folder they get permission denied.
Thanks for the help!
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
File and folder special permissions
- Create Files/Write Data
- Create Folders/Append Data
- Delete Subfolders and Files
Create Folders/Append Data
The Create Folders permission applies only to folders and allows or denies the user from creating folders in the folder.
Create Folders/Append Data
The Create Folders permission applies only to folders and allows or denies the user from creating folders in the folder.
The Append Data permission applies only to files and allows or denies the user from making changes to the end of the file but not from changing, deleting, or overwriting existing data .
Delete Subfolders and Files
The Delete Subfolders and Files permission applies only to folders and allows or denies the user from deleting subfolders and files, even if the Delete permission is not granted on the subfolder or file.
Ref:
http://www.ntfs.com/ntfs-permissions-file-advanced.htm
http://support.microsoft.com/kb/308419
http://www.google.com/search?q=folder+permissions+to+create+files+not+subfolders