Solved

Set NTFS permissions so the user cant delete folder

Posted on 2014-02-20
8
591 Views
Last Modified: 2014-02-20
Need to set permissions so the user can not delete his folder from list of folders, but can work inside of it fully.

Currently I have weird option where the root folder does not get deleted, but everything inside does.

All this is for developing sets of permissions for the network share.
0
Comment
Question by:mrmut
  • 4
  • 2
  • 2
8 Comments
 
LVL 11

Expert Comment

by:Manjunath Sullad
ID: 39873274
You need to set Inheritance permission for that folders,

You can assign Read permissions to users, Instead of Read / Write or Full permission.

Rt Click on Folder --> Properties --> Security -->  Advanced, Chek the inheritance.

Go through below MS Library to know more on Inheritance.

http://technet.microsoft.com/en-us/library/cc726071.aspx

http://social.technet.microsoft.com/Forums/windows/en-US/c8a87698-16f1-421d-a57d-57f2c5000911/understanding-windows-7-permission-inheritance?forum=w7itprosecurity
0
 

Author Comment

by:mrmut
ID: 39873428
Yes, all, fine, but the problem is that the delete command "jumped over" the root folder that had permissions set to deny deletion.
0
 
LVL 16

Expert Comment

by:Dirk Mare
ID: 39873473
Go to Share permission properties and select the Securities Tab, click Advanced at the bottom.

Select the User end click on Edit.

Change the permissions here..

Not 100% sure if you are going to have to apply to "This Folder Only" or " This Folder SubFolders and File"

DirkMare
perm.PNG
0
 
LVL 11

Expert Comment

by:Manjunath Sullad
ID: 39873497
Seems to be something messed up with Inheritance..... Can you cross verify the permissions and Inheritance access.

Select Apply these permissions to objects and / or container within this container
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 

Author Comment

by:mrmut
ID: 39873555
Dirk - but that will render all the stuff inside also undeletable. I am trying to protect the root users' folders.

Sullad - tried that already. What I don't get is how the delete can jump over? I mean - the stuff inside folder are deleteable, but I am trying to put this "block" in place exactly because of this.
0
 
LVL 16

Accepted Solution

by:
Dirk Mare earned 500 total points
ID: 39873571
You have two permissions.

Delete: Deny
Delete Subfolder and Files : Allow

Thats why a said you need check onto which object it gets applied to.


DirkMare
object.PNG
0
 

Author Comment

by:mrmut
ID: 39874049
Dirk - I completely overlooked this. :(

I will recheck it!
0
 

Author Closing Comment

by:mrmut
ID: 39874055
Thanks, overlooked this set :)
0

Featured Post

Do email signature updates give you a headache?

Constantly trying to correctly format email signatures? Spending all of your time at every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Group policy not applying 5 74
Understanding Security Log Events 2 48
Auto Login Script 3 12
vmdk greater than 2TB 2 20
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now