Solved

Assigning Delete Permission or deny delete permissions in Windows Server 2008 to certain users

Posted on 2010-09-13
4
843 Views
Last Modified: 2012-05-10
We have a Windows 2008 server that we primarily use as a file server in a workgroup setting.  We have the following network share “J:\saved_forms”    We have about 100 users (e.g., User1-User100).

We would like only the administrator and User1 to be able to delete files from this particular folder.  All other users can read, modify and create files.  What is the best way to set this up using permissions?

Thanks so much,
Mike
0
Comment
Question by:jumptohigh
  • 2
  • 2
4 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 250 total points
ID: 33662979
You will need to create a group - lets call it Deleters - and then add that to the ACL for the folder. Explicitly grant this group the delete permission (in the special permissions)

For Domain Users remove - DO NOT DENY the delete permission

(You may need to remove inheritance to do this)
0
 

Author Comment

by:jumptohigh
ID: 33671450
KCTS

Do I need to assign an explicit deny delete to the Everyone Group in the ACL for that folder?

Thanks,
Mike
0
 
LVL 70

Expert Comment

by:KCTS
ID: 33671546
No - if you deny EVERYONE then the DENY will prevent ANYONE (including admins) fromn deleting the file - simply remove DELETE from Everyone - and/or (Domain) Users and Authenticated Users
0
 

Author Comment

by:jumptohigh
ID: 33708649
KCTS

I cannot deselect DELETE from the everyone group because the check (and all checks) are grayed out. What do I need to do to make these items clickable?  

Thanks for your help.

Mike
0

Featured Post

Active Directory Webinar

We all know we need to protect and secure our privileges, but where to start? Join Experts Exchange and ManageEngine on Tuesday, April 11, 2017 10:00 AM PDT to learn how to track and secure privileged users in Active Directory.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SYSVOL corrupted 12 93
Slow Internet Connection 9 54
Receiving wifi on an underground station 22 96
BGP recommended setup with failover 2 49
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question