Solved

Prevent file deletion on Win 2008 network

Posted on 2014-10-02
6
136 Views
Last Modified: 2014-10-06
Hi experts,

I believe this question has been asked many times before, but I would like to see if there is any new development from Microsoft regarding this.

We are running a Win 2008 R2 domain. On our file server everyone has full access to all data folders/files, as they have mapped drives on their own PCs.

Because they are files stored on network recycle bin doesn't work (unless someone can tell me otherwise). Not even a deletion warning message (like your own Win 7 PCs) is displayed on deletion. So it is fairly easy for user(s) to accidentally delete file(s) on the network drive.

We would like to implement NTFS permissions to prevent this to happen. We did by setting everyone to have "special" permissions (Read/Create/Write attributes etc) without the permission to DELETE. It works well with .txt files, that users can create and edit but they can't delete. However it doesn't work so well with Word and Excel documents.

Users can open Word or Excel document but they can't SAVE (which means edition no point!). From my understanding, when user tries to save a Word or Excel file a .TMP file has been created by the system (for lock?). When the SAVE is successful the .TMP will be removed automatically. However in my case, the system restricts user to remove the .TMP file (user do NOT have delete permission!) hence saving is not permitted. When I check the server, there are lots of .TMP files been created, probably one for each SAVE attempt.

Now, does anyone know a work around in Windows system to allow such to happen. What I want to achieve is, on those network folders user to be permitted to create/edit/save(!) but not delete.

Much appreciated for your help.

Thanks,
0
Comment
Question by:ormerodrutter
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 22

Accepted Solution

by:
Larry Struckmeyer MVP earned 500 total points
ID: 40356700
Hi:
My only suggestion is to use a network undelete utility, and I have no experience with them.  Here is one, with a trial...

http://learn.condusiv.com/Undelete-10-Landing.html?utm_source=website&utm_name=Evaluation_Campaign-Undelete&utm_detail=Website_Evaluation&Lsource=Web-Inbound&source-detail=2013-Website-UDEval
0
 
LVL 96

Expert Comment

by:Experienced Member
ID: 40356763
I don't think you can really prevent users from deleting their own files. They may wish to, after all.

I make sure backups are running each evening, and if a user accidentally deletes a file, we can recover from backup. It really does not happen very often.
0
 
LVL 22

Expert Comment

by:Larry Struckmeyer MVP
ID: 40356782
Well it is not that hard.  Shadow copies (previous versions) allows you to restore any deleted or changed file for server generations without having to resort to backup/restore.

For 2008
http://technet.microsoft.com/en-us/library/cc794321(v=WS.10).aspx

For 2003
http://technet.microsoft.com/en-us/library/cc787329(v=WS.10).aspx

It is same similar for all server versions since 2003
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 23

Author Comment

by:ormerodrutter
ID: 40356833
I know about shadow copies but I believe it has to be applied at ROOT directory? We have over 400GB+ of data and only 120GB space left on the file server. So not sure if Shadow Copy could help if we try to avoid buying additional storage. Also, Shadow copies involves with taking snapshots on the system at a set time - files are sometimes being changed by various staffs on regular intervals.

I see Shadow copies would help file restore, but not preventing accidentally deletion.
0
 
LVL 22

Expert Comment

by:Larry Struckmeyer MVP
ID: 40356976
But, following accidental deletion, recovery is a snap.  But I wish you luck on solving the original question.
0
 
LVL 23

Author Comment

by:ormerodrutter
ID: 40363159
I am actually trailing the Undelete10 software you suggested. Looks good so far. Thanks for that. You have my points :)
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
Suggested Courses

635 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question