Solved

Prevent users from moving/deleting folders on a 2008 file server

Posted on 2013-01-04
3
918 Views
Last Modified: 2013-01-16
Some of my users are a bit careless and accidentally drag/move folders to other locations on the file server. And there is the occasional deletion of folder trees.

Is there a simple way to keep users from moving or deleting folders?  There is seldom a need for a user to delete a folder.

Basically I'd like to set the permissions of the folder object to prevent a user from moving/deleting it, yet allow Modify access to the files within the folders.

- It's OK if users create new folders, but not delete them, or at least not delte those created by other users.  
- Users need Modify rights to the files in folders to create/view/edit/delete files.
- Domain Admins need to maintain rights to modify the folders.  

I looked through Advanced Permissions, but folder and file deletion seem bound to each other (Delete Subfolders and Files).

I have 500 users, The file server is running Server 2008 R2 Enterprise SP2. There is one share (GROUPS) with with numerous folders beneath (SALES, MARKETING, AP...) which each have different NTFS permissions set on them.
0
Comment
Question by:Justin S.
  • 2
3 Comments
 
LVL 28

Expert Comment

by:jhyiesla
ID: 38743843
Yeah, I think you've pretty much answered your own question. MS has never had real granular permissions on files vs folders and the Advanced section is where I would have sent you, but you're right, files and folders are linked together.

We have this same problem, although it's not real bad and we basically just have to have a good back up of the server and be able to restore things that get deleted.
0
 

Author Comment

by:Justin S.
ID: 38744160
Perhaps. Maybe something in Group Policy or some magical reg edit? I'm hoping to be surprised...
0
 
LVL 28

Accepted Solution

by:
jhyiesla earned 500 total points
ID: 38744516
Although I don't know by heart all the registry keys or GPO settings, I'd not suspect you'd find something there. These tend to operate at the macro level meaning that you are changing things globally and not microscopically at the file or folder level. I can changes desktop behavior, but not the specifics of what's on the desktop, for example.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This comprehensive conference-networking guide will help you prep, practice and pack for success, reach out with purpose and confidence, capitalize on connections, and turn all those new leads into long-term connections.
In this guide, I outline 7 key steps to help technology professionals grow their careers. Whether you have been working in technology for 10 years or for 10 days, follow these steps to help you achieve your career goals and pursue your passions.
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Edureka is one of the fastest growing and most effective online learning sites.  We are here to help you succeed.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now