Solved

Prevent users from moving/deleting folders on a 2008 file server

Posted on 2013-01-04
3
923 Views
Last Modified: 2013-01-16
Some of my users are a bit careless and accidentally drag/move folders to other locations on the file server. And there is the occasional deletion of folder trees.

Is there a simple way to keep users from moving or deleting folders?  There is seldom a need for a user to delete a folder.

Basically I'd like to set the permissions of the folder object to prevent a user from moving/deleting it, yet allow Modify access to the files within the folders.

- It's OK if users create new folders, but not delete them, or at least not delte those created by other users.  
- Users need Modify rights to the files in folders to create/view/edit/delete files.
- Domain Admins need to maintain rights to modify the folders.  

I looked through Advanced Permissions, but folder and file deletion seem bound to each other (Delete Subfolders and Files).

I have 500 users, The file server is running Server 2008 R2 Enterprise SP2. There is one share (GROUPS) with with numerous folders beneath (SALES, MARKETING, AP...) which each have different NTFS permissions set on them.
0
Comment
Question by:Justin S.
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 28

Expert Comment

by:jhyiesla
ID: 38743843
Yeah, I think you've pretty much answered your own question. MS has never had real granular permissions on files vs folders and the Advanced section is where I would have sent you, but you're right, files and folders are linked together.

We have this same problem, although it's not real bad and we basically just have to have a good back up of the server and be able to restore things that get deleted.
0
 

Author Comment

by:Justin S.
ID: 38744160
Perhaps. Maybe something in Group Policy or some magical reg edit? I'm hoping to be surprised...
0
 
LVL 28

Accepted Solution

by:
jhyiesla earned 500 total points
ID: 38744516
Although I don't know by heart all the registry keys or GPO settings, I'd not suspect you'd find something there. These tend to operate at the macro level meaning that you are changing things globally and not microscopically at the file or folder level. I can changes desktop behavior, but not the specifics of what's on the desktop, for example.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
What is this Task? 4 152
sccm client without collection 1 70
Create workstation base image 4 70
Let users to install software without administrator rights 7 41
Note: This is the second blog post in a series on email clearinghouses (https://www.xmatters.com/alert-management/blog-email-has-failed-us?utm_campaign=70138000000ydLoAAI&utm_source=exex&utm_medium=article&utm_content=blog-post).   Every month t…
IT certifications are a concrete representation of continual learning on the part of the candidate.  Continual learning is necessary for the long term success of an IT professional, but are IT certifications the right path for you?
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question