?
Solved

How do I prevent certain users on a Windows Server 2008 from deleting files?

Posted on 2012-03-23
2
Medium Priority
?
269 Views
Last Modified: 2012-08-14
Hello experts,

There are some users on our windows 2008 workgroup that we would like to NOT have the ability to delete files.  Currently, all users have this ability.  What would be the best way to set this up as far as groups and permissions?

Also, when our users do delete a file from the server, where does that file go? I don't see it in either the workstation's or server's recycle bin?

Thanks for your help.

Regards,
Mike
0
Comment
Question by:jumptohigh
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 4

Accepted Solution

by:
Ben Vrijsen earned 2000 total points
ID: 37756732
The best way I believe, is to create new Security Groups, and catagorize your users in those groups.
For example a group called GG_Allow_Delete and a group GG_DONOT_Allow_Delete.
Next step is to change the NTFS security persmissions on specific folders or files. (properties, security, advanced, change permissions) over there you can modify the DELETE tick box.
You can also force the changes on child objects.
In case you have a whole folder that you want to protect, except for one file/subfolder you can also block the inheritance of parent permissions on those.
Regarding the deleted files, I'd say that those whould be in the recycle bin on the server.
You also might want to consider implementing "previous versions", that allows you to go back to previous saved versions of files or even revert deletions.
0
 

Author Closing Comment

by:jumptohigh
ID: 37802799
Thanks neopan!
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We take a look at some of the most common obstacles that IT teams run into as they work relentlessly to keep all the alarms and sirens from going off at once.
Backups and Disaster RecoveryIn this post, we’ll look at strategies for backups and disaster recovery.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question