Solved

file server directory permissions

Posted on 2012-04-04
6
143 Views
Last Modified: 2012-04-11
I want to create a folder for one of my departments and access to the folder need to be:
all of the users from that department need to be able to create a files and folders there
all of the users from that department need to be prohibited permissions to delete or modify any of the files that was created initianly by them.

I don't want to use deny permissions in security permissions tab, because it is very hard to troubleshoot problems in the future.
Is it possible to be performed above?
0
Comment
Question by:dedri
6 Comments
 
LVL 34

Expert Comment

by:Paul MacDonald
ID: 37805955
Not without using "deny" permissions.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37805998
I would have to agree you can't get around this without using deny.
0
 
LVL 1

Expert Comment

by:iraklioracle
ID: 37806026
Hello, Uncheck like on picture.
Capture.PNG
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 
LVL 6

Expert Comment

by:slakic
ID: 37806028
You need to take ownership for the files created by the users.

You can do that by scheduling the script for example every hour, to change ownership of all files in directory to certain user or administrator.

You can use takeown command

takeown /F <filename>

Open in new window


When you take ownership of the files, users won't be able to delete them anymore.

Take a look here at the takeown command.

This still would disable editing, but, fiddling with CACLS command and running the script on a regular basis you could get close.
0
 

Author Comment

by:dedri
ID: 37806424
@iraklioracle,

I made exactly the same things as in the picture. Result is the following:
1. If I create new files in directory I am not able to modify or delete them
2. If I copy file from some other directory to this folder I am able to modify and delete them.
Any idea how to fix it.
0
 
LVL 1

Accepted Solution

by:
iraklioracle earned 500 total points
ID: 37807193
In my case it works, i can't modify or delete, if I create or Copy them.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now