Solved

How can we allow users to create folder directly on a shared drive without allowing full control? WIndows 7

Posted on 2014-09-24
3
193 Views
Last Modified: 2014-10-07
We have set up active directory to allow certain users to save files and folders into a shared drive but not delete or rename them.  Once the folder is created, they can also save files directly in the folder but they can't create the folders directly from the SAVE AS file dialog.  They can't and shouldn't be able to delete or rename anything in the folder.

 Right now their workflow is to create a folder in MY DOCUMENTS and cut and paste it into the shared drive then use our reporting application to save files under that folder.  We'd like to allow them to create a folder in the restricted drive directly from the application using the standard Save File Dialog of Windows 7 (64).  We get an error saying the file can't be created under that name.  A "NEW FOLDER" is created however, but can't be renamed.

We suspect this is a symptom of Windows creating a temporary folder during the save as process which the user is not allowed to change but this is outside my area of expertise.

What we want is for the user to be able to create a folder and name it directly in the restricted drive without having to drag it from a nonrestricted location.

Here is a picture of permissions for one user.

Permissions.bmp
Any suggestions would be appreciated.

Thanks!
0
Comment
Question by:zipnotic
  • 2
3 Comments
 
LVL 16

Accepted Solution

by:
ThinkPaper earned 500 total points
ID: 40342716
So.. you only want users to add files/folders to the folder, but not modify/rename/delete anything in it.. But then you also want the user to be able to create new folders and name them appropriately (at the creation point of the file).

You can't restrict it so that they can only rename a folder in one instance, but not another.. either you give them permission to do it or you don't. And unfortunately, from what I understand, you can't allow them to rename something without giving them "delete" permissions, since a "modify" is technically a "delete and create".

Enabling modify (rename) w/out delete:
http://community.spiceworks.com/topic/233590-how-to-allow-users-to-rename-folders-but-not-be-able-to-delete

File Permissions:
http://technet.microsoft.com/en-us/library/bb727008.aspx
0
 

Author Comment

by:zipnotic
ID: 40342806
So the create folder dialog is actually creating then renaming the folder at the time of creation (which isn't allowed) rather than just creating a new folder?

I'm thinking, just like the forum in the link you sent, the best work around is to create the folder of desired name locally then copy and paste it into the restricted drive.  That has been a hassle for our clerks.
0
 

Author Closing Comment

by:zipnotic
ID: 40366971
Thanks
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question