Folder and file permissions

Posted on 2011-09-28
Last Modified: 2012-05-12
I want to stop file creation on a folder.  But allow saving a file that is already present in the same folder.

I changed permissions on the 'domain user' for the folder, by stopping inherited permissions from above, then giving it read and list.   Then went to the file, and gave it modify write.  Checked the 'effective perimissions', and it shows domain user having modify/write permissions.  But the folder permissions seem to be the only ones that take effect.

Question by:Geek_guy
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

Author Comment

ID: 36720068
Domain controllers are Windows 2003.
LVL 11

Accepted Solution

madhatter5501 earned 200 total points
ID: 36720069
have you gone in to the special permissions to see if you can set the permissions there?
LVL 11

Expert Comment

ID: 36720090
I think you need to look at the append data permission
Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.


Author Comment

ID: 36720122
If Madhatter is refering to the 'advanced', I've done that.

I only see 'create folder/append data'  you think that will stop a new file from being created in the folder?
LVL 11

Expert Comment

ID: 36720141
try it, if it doesn't work, we'll try something else
LVL 37

Assisted Solution

by:Neil Russell
Neil Russell earned 200 total points
ID: 36720184
deny create
allow modify

Assisted Solution

i_am_pete earned 100 total points
ID: 36720753
You have restrict folder level permission to read only then remove inheritance on the files.  Then you can change the existing file permissions to rw.

Author Comment

ID: 37031565

This issue went away and I didnt' have time to get back with it.  The comments were appropriate, but similar to what I had already tried.

Author Closing Comment

ID: 37031596
Suggestions were good, but I had tried them.  Didn't have an idea of where to go next.

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A hard and fast method for reducing Active Directory Administrators members.
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question