helpdesk2890
asked on
Limit user permissions on a folder they create
I have a file share on a 2008 R2 server that currently everyone at my company has access to. The top level security permissions give "Domain Users" Full Control (not Special Permissions though).
Over time this file share has become huge with users creating new file structures going many levels deep. The problem I have run up against is some of the users have broken the inherited permissions and the created their own permissions on the folders they have created.
Now I have been tasked with creating a new file share. I want/need to allow user to create new folders but I want to limit their ability to change the permissions on these newly created folders. Is that possible?
This may be Microsoft 101 stuff, but I am unable to find an answer.
The current server is a 2008 R2 with the File Services role installed, just in case it matters. The new file share can either go on a 2008 R2 box or a 2012.
Over time this file share has become huge with users creating new file structures going many levels deep. The problem I have run up against is some of the users have broken the inherited permissions and the created their own permissions on the folders they have created.
Now I have been tasked with creating a new file share. I want/need to allow user to create new folders but I want to limit their ability to change the permissions on these newly created folders. Is that possible?
This may be Microsoft 101 stuff, but I am unable to find an answer.
The current server is a 2008 R2 with the File Services role installed, just in case it matters. The new file share can either go on a 2008 R2 box or a 2012.
ASKER CERTIFIED SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
ASKER
I knew it had to be something easy. Thanks for the screenshots also. A follow-up question if I may. If I deny Domain Users' change permissions ability, if they create a new folder would they be considered a Domain User or a CREATOR OWNER? If it is the latter of the two then would I want to change the permissions of the CREATOR OWNER? Or can I delete that role completely?
I made the test. The user will be CREATOR OWNER but he can't change, break, or add permissions.
So you don't have to change the CREATOR OWNER permissions. In my case the CREATOR OWNER account had Full control
ASKER
Excellent. Thanks for your assistance.
http://technet.microsoft.com/en-us/library/cc753521.aspx
Refer the below link for Set, View, Change, or Remove Special Permissions
http://technet.microsoft.com/en-us/library/cc772196.aspx