How do I prevent certain users on a Windows Server 2008 from deleting files?

Hello experts,

There are some users on our windows 2008 workgroup that we would like to NOT have the ability to delete files.  Currently, all users have this ability.  What would be the best way to set this up as far as groups and permissions?

Also, when our users do delete a file from the server, where does that file go? I don't see it in either the workstation's or server's recycle bin?

Thanks for your help.

Regards,
Mike
jumptohighAsked:
Who is Participating?
 
Ben VrijsenConnect With a Mentor OwnerCommented:
The best way I believe, is to create new Security Groups, and catagorize your users in those groups.
For example a group called GG_Allow_Delete and a group GG_DONOT_Allow_Delete.
Next step is to change the NTFS security persmissions on specific folders or files. (properties, security, advanced, change permissions) over there you can modify the DELETE tick box.
You can also force the changes on child objects.
In case you have a whole folder that you want to protect, except for one file/subfolder you can also block the inheritance of parent permissions on those.
Regarding the deleted files, I'd say that those whould be in the recycle bin on the server.
You also might want to consider implementing "previous versions", that allows you to go back to previous saved versions of files or even revert deletions.
0
 
jumptohighAuthor Commented:
Thanks neopan!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.