Link to home
Start Free TrialLog in
Avatar of dedri
dedriFlag for United States of America

asked on

file server directory permissions

I want to create a folder for one of my departments and access to the folder need to be:
all of the users from that department need to be able to create a files and folders there
all of the users from that department need to be prohibited permissions to delete or modify any of the files that was created initianly by them.

I don't want to use deny permissions in security permissions tab, because it is very hard to troubleshoot problems in the future.
Is it possible to be performed above?
Avatar of Paul MacDonald
Paul MacDonald
Flag of United States of America image

Not without using "deny" permissions.
I would have to agree you can't get around this without using deny.
Hello, Uncheck like on picture.
Capture.PNG
You need to take ownership for the files created by the users.

You can do that by scheduling the script for example every hour, to change ownership of all files in directory to certain user or administrator.

You can use takeown command

takeown /F <filename>

Open in new window


When you take ownership of the files, users won't be able to delete them anymore.

Take a look here at the takeown command.

This still would disable editing, but, fiddling with CACLS command and running the script on a regular basis you could get close.
Avatar of dedri

ASKER

@iraklioracle,

I made exactly the same things as in the picture. Result is the following:
1. If I create new files in directory I am not able to modify or delete them
2. If I copy file from some other directory to this folder I am able to modify and delete them.
Any idea how to fix it.
ASKER CERTIFIED SOLUTION
Avatar of iraklioracle
iraklioracle
Flag of Georgia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial