Solved

How can we allow users to create folder directly on a shared drive without allowing full control? WIndows 7

Posted on 2014-09-24
3
189 Views
Last Modified: 2014-10-07
We have set up active directory to allow certain users to save files and folders into a shared drive but not delete or rename them.  Once the folder is created, they can also save files directly in the folder but they can't create the folders directly from the SAVE AS file dialog.  They can't and shouldn't be able to delete or rename anything in the folder.

 Right now their workflow is to create a folder in MY DOCUMENTS and cut and paste it into the shared drive then use our reporting application to save files under that folder.  We'd like to allow them to create a folder in the restricted drive directly from the application using the standard Save File Dialog of Windows 7 (64).  We get an error saying the file can't be created under that name.  A "NEW FOLDER" is created however, but can't be renamed.

We suspect this is a symptom of Windows creating a temporary folder during the save as process which the user is not allowed to change but this is outside my area of expertise.

What we want is for the user to be able to create a folder and name it directly in the restricted drive without having to drag it from a nonrestricted location.

Here is a picture of permissions for one user.

Permissions.bmp
Any suggestions would be appreciated.

Thanks!
0
Comment
Question by:zipnotic
  • 2
3 Comments
 
LVL 16

Accepted Solution

by:
ThinkPaper earned 500 total points
ID: 40342716
So.. you only want users to add files/folders to the folder, but not modify/rename/delete anything in it.. But then you also want the user to be able to create new folders and name them appropriately (at the creation point of the file).

You can't restrict it so that they can only rename a folder in one instance, but not another.. either you give them permission to do it or you don't. And unfortunately, from what I understand, you can't allow them to rename something without giving them "delete" permissions, since a "modify" is technically a "delete and create".

Enabling modify (rename) w/out delete:
http://community.spiceworks.com/topic/233590-how-to-allow-users-to-rename-folders-but-not-be-able-to-delete

File Permissions:
http://technet.microsoft.com/en-us/library/bb727008.aspx
0
 

Author Comment

by:zipnotic
ID: 40342806
So the create folder dialog is actually creating then renaming the folder at the time of creation (which isn't allowed) rather than just creating a new folder?

I'm thinking, just like the forum in the link you sent, the best work around is to create the folder of desired name locally then copy and paste it into the restricted drive.  That has been a hassle for our clerks.
0
 

Author Closing Comment

by:zipnotic
ID: 40366971
Thanks
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Group Policies not being applied 12 28
Question to the line 4 38
Distribution groups exchange 2013 6 43
Place to store Android app 19 43
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now