?
Solved

Set NTFS permissions so the user cant delete folder

Posted on 2014-02-20
8
Medium Priority
?
615 Views
Last Modified: 2014-02-20
Need to set permissions so the user can not delete his folder from list of folders, but can work inside of it fully.

Currently I have weird option where the root folder does not get deleted, but everything inside does.

All this is for developing sets of permissions for the network share.
0
Comment
Question by:mrmut
  • 4
  • 2
  • 2
8 Comments
 
LVL 11

Expert Comment

by:Manjunath Sullad
ID: 39873274
You need to set Inheritance permission for that folders,

You can assign Read permissions to users, Instead of Read / Write or Full permission.

Rt Click on Folder --> Properties --> Security -->  Advanced, Chek the inheritance.

Go through below MS Library to know more on Inheritance.

http://technet.microsoft.com/en-us/library/cc726071.aspx

http://social.technet.microsoft.com/Forums/windows/en-US/c8a87698-16f1-421d-a57d-57f2c5000911/understanding-windows-7-permission-inheritance?forum=w7itprosecurity
0
 

Author Comment

by:mrmut
ID: 39873428
Yes, all, fine, but the problem is that the delete command "jumped over" the root folder that had permissions set to deny deletion.
0
 
LVL 16

Expert Comment

by:Dirk Mare
ID: 39873473
Go to Share permission properties and select the Securities Tab, click Advanced at the bottom.

Select the User end click on Edit.

Change the permissions here..

Not 100% sure if you are going to have to apply to "This Folder Only" or " This Folder SubFolders and File"

DirkMare
perm.PNG
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 11

Expert Comment

by:Manjunath Sullad
ID: 39873497
Seems to be something messed up with Inheritance..... Can you cross verify the permissions and Inheritance access.

Select Apply these permissions to objects and / or container within this container
0
 

Author Comment

by:mrmut
ID: 39873555
Dirk - but that will render all the stuff inside also undeletable. I am trying to protect the root users' folders.

Sullad - tried that already. What I don't get is how the delete can jump over? I mean - the stuff inside folder are deleteable, but I am trying to put this "block" in place exactly because of this.
0
 
LVL 16

Accepted Solution

by:
Dirk Mare earned 2000 total points
ID: 39873571
You have two permissions.

Delete: Deny
Delete Subfolder and Files : Allow

Thats why a said you need check onto which object it gets applied to.


DirkMare
object.PNG
0
 

Author Comment

by:mrmut
ID: 39874049
Dirk - I completely overlooked this. :(

I will recheck it!
0
 

Author Closing Comment

by:mrmut
ID: 39874055
Thanks, overlooked this set :)
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question