Solved

Prevent users from moving/deleting folders on a 2008 file server

Posted on 2013-01-04
3
920 Views
Last Modified: 2013-01-16
Some of my users are a bit careless and accidentally drag/move folders to other locations on the file server. And there is the occasional deletion of folder trees.

Is there a simple way to keep users from moving or deleting folders?  There is seldom a need for a user to delete a folder.

Basically I'd like to set the permissions of the folder object to prevent a user from moving/deleting it, yet allow Modify access to the files within the folders.

- It's OK if users create new folders, but not delete them, or at least not delte those created by other users.  
- Users need Modify rights to the files in folders to create/view/edit/delete files.
- Domain Admins need to maintain rights to modify the folders.  

I looked through Advanced Permissions, but folder and file deletion seem bound to each other (Delete Subfolders and Files).

I have 500 users, The file server is running Server 2008 R2 Enterprise SP2. There is one share (GROUPS) with with numerous folders beneath (SALES, MARKETING, AP...) which each have different NTFS permissions set on them.
0
Comment
Question by:Justin S.
  • 2
3 Comments
 
LVL 28

Expert Comment

by:jhyiesla
ID: 38743843
Yeah, I think you've pretty much answered your own question. MS has never had real granular permissions on files vs folders and the Advanced section is where I would have sent you, but you're right, files and folders are linked together.

We have this same problem, although it's not real bad and we basically just have to have a good back up of the server and be able to restore things that get deleted.
0
 

Author Comment

by:Justin S.
ID: 38744160
Perhaps. Maybe something in Group Policy or some magical reg edit? I'm hoping to be surprised...
0
 
LVL 28

Accepted Solution

by:
jhyiesla earned 500 total points
ID: 38744516
Although I don't know by heart all the registry keys or GPO settings, I'd not suspect you'd find something there. These tend to operate at the macro level meaning that you are changing things globally and not microscopically at the file or folder level. I can changes desktop behavior, but not the specifics of what's on the desktop, for example.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Note: This is the second blog post in a series on email clearinghouses (https://www.xmatters.com/alert-management/blog-email-has-failed-us?utm_campaign=70138000000ydLoAAI&utm_source=exex&utm_medium=article&utm_content=blog-post).   Every month t…
IT certifications are a concrete representation of continual learning on the part of the candidate.  Continual learning is necessary for the long term success of an IT professional, but are IT certifications the right path for you?
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question