Folder and file permissions

Posted on 2011-09-28
Last Modified: 2012-05-12
I want to stop file creation on a folder.  But allow saving a file that is already present in the same folder.

I changed permissions on the 'domain user' for the folder, by stopping inherited permissions from above, then giving it read and list.   Then went to the file, and gave it modify write.  Checked the 'effective perimissions', and it shows domain user having modify/write permissions.  But the folder permissions seem to be the only ones that take effect.

Question by:Geek_guy

Author Comment

ID: 36720068
Domain controllers are Windows 2003.
LVL 11

Accepted Solution

madhatter5501 earned 200 total points
ID: 36720069
have you gone in to the special permissions to see if you can set the permissions there?
LVL 11

Expert Comment

ID: 36720090
I think you need to look at the append data permission

Author Comment

ID: 36720122
If Madhatter is refering to the 'advanced', I've done that.

I only see 'create folder/append data'  you think that will stop a new file from being created in the folder?
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

LVL 11

Expert Comment

ID: 36720141
try it, if it doesn't work, we'll try something else
LVL 37

Assisted Solution

by:Neil Russell
Neil Russell earned 200 total points
ID: 36720184
deny create
allow modify

Assisted Solution

i_am_pete earned 100 total points
ID: 36720753
You have restrict folder level permission to read only then remove inheritance on the files.  Then you can change the existing file permissions to rw.

Author Comment

ID: 37031565

This issue went away and I didnt' have time to get back with it.  The comments were appropriate, but similar to what I had already tried.

Author Closing Comment

ID: 37031596
Suggestions were good, but I had tried them.  Didn't have an idea of where to go next.

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Group policy not applying 5 75
GPO Delegation 4 30
Multipurpose Server for a very small buisiness 20 106
PowerShell - Exporting AD User Group Membership 6 44
I'm sure that every Windows systems administrator has written, or at least used, a batch or VBS login script at some point in their career, whether it is to map network drives, install printers, or set some user preferences.  No more! With Window…
Starting in Windows Server 2008, Microsoft introduced the Group Policy Central Store. This automatically replicating location allows IT administrators to have the latest and greatest Group Policy (GP) configuration settings available. Let’s expl…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

26 Experts available now in Live!

Get 1:1 Help Now