NTFS Modify access and deny creating new files and folders

Hi Experts,

I would like users to modify existing data in a folder but deny them creating new files or folders, is this possible? i'm pretty sure it isn't possible as the attribute "create files / write data" works together so i can't allow one and deny the other. any suggestions. Cheers
LVL 1
WeirdFishesAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Brian PiercePhotographerCommented:
The 'Modify' permission is not the right to modify the contents of the file - its the ability to chnage the file itself such as renaming it or deleting it.
You only need to grant the write permission for the user to chnage the contents of a file.
0
WeirdFishesAuthor Commented:
Sorry i meant 'write data', but they still can create files hence it's not the solution. Cheers
0
Russell_VenableCommented:
I am not aware of any built-in solutions for this. In order for this to have any effect you would need something that hooks CreateFile, Creates a list of current files to in the directory, and monitors that specific directory for file creation events and changes and acts accordingly.

The problem with remote file modification and restriction is that if its open remotely, not only do you have multi-user issues try to access the file at the same time. You have the problem that if its a file such as a Word document the file MUST have the ability to create a new file as it requires a temporary file to be created to allow printing, modification, etc while not interfering with the multithreaded state of the word application in general. Its just how it and many other multithreaded applications work by design to avoid undesirable effects like thread locks.

I know this is not the answer your looking for, but from a developers point of view you would need something implemented on a much lower level and most likely custom made. I see this question quite often to no resolve it comes down to a 3rd party solution.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ChiefITCommented:
You misunderstood what KCTS was telling you:

Modify grants you the ability to modify existing documents.

Write allows you to create files and folders.

Isn't that what you wanted is to Modify, but NOT Write?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.