I am trying to create a permissions group in Server 2008 R2 Active Directory on my Domain, that allows members to Add, Edit, and Save documents in a directory on our file server - but will not allow members to delete any folders, sub-folders or files.
I created a Universal Security Group, and tried two things:
1. I assigned it Modify permissions to the folder, and then in Advanced Permissions I un-checked the Delete check box. The Delete Subfolders and Files checkbox was already unchecked.
2. I assigned it Full Control permissions to the folder, and then in Advanced Permissions I un-checked the Delete check box and the Delete Subfolders and Files checkbox.
This seems to work while testing using a .txt file, but if I use a MS Office file and let's say edit it, there are .tmp files that do not go away, presumably because there are no delete permissions. How do I get around this? Screenshot below - thanks in advance!