Solved

Prevent file deletion on Win 2008 network

Posted on 2014-10-02
6
130 Views
Last Modified: 2014-10-06
Hi experts,

I believe this question has been asked many times before, but I would like to see if there is any new development from Microsoft regarding this.

We are running a Win 2008 R2 domain. On our file server everyone has full access to all data folders/files, as they have mapped drives on their own PCs.

Because they are files stored on network recycle bin doesn't work (unless someone can tell me otherwise). Not even a deletion warning message (like your own Win 7 PCs) is displayed on deletion. So it is fairly easy for user(s) to accidentally delete file(s) on the network drive.

We would like to implement NTFS permissions to prevent this to happen. We did by setting everyone to have "special" permissions (Read/Create/Write attributes etc) without the permission to DELETE. It works well with .txt files, that users can create and edit but they can't delete. However it doesn't work so well with Word and Excel documents.

Users can open Word or Excel document but they can't SAVE (which means edition no point!). From my understanding, when user tries to save a Word or Excel file a .TMP file has been created by the system (for lock?). When the SAVE is successful the .TMP will be removed automatically. However in my case, the system restricts user to remove the .TMP file (user do NOT have delete permission!) hence saving is not permitted. When I check the server, there are lots of .TMP files been created, probably one for each SAVE attempt.

Now, does anyone know a work around in Windows system to allow such to happen. What I want to achieve is, on those network folders user to be permitted to create/edit/save(!) but not delete.

Much appreciated for your help.

Thanks,
0
Comment
Question by:ormerodrutter
  • 3
  • 2
6 Comments
 
LVL 21

Accepted Solution

by:
Larry Struckmeyer MVP earned 500 total points
ID: 40356700
Hi:
My only suggestion is to use a network undelete utility, and I have no experience with them.  Here is one, with a trial...

http://learn.condusiv.com/Undelete-10-Landing.html?utm_source=website&utm_name=Evaluation_Campaign-Undelete&utm_detail=Website_Evaluation&Lsource=Web-Inbound&source-detail=2013-Website-UDEval
0
 
LVL 92

Expert Comment

by:John Hurst
ID: 40356763
I don't think you can really prevent users from deleting their own files. They may wish to, after all.

I make sure backups are running each evening, and if a user accidentally deletes a file, we can recover from backup. It really does not happen very often.
0
 
LVL 21

Expert Comment

by:Larry Struckmeyer MVP
ID: 40356782
Well it is not that hard.  Shadow copies (previous versions) allows you to restore any deleted or changed file for server generations without having to resort to backup/restore.

For 2008
http://technet.microsoft.com/en-us/library/cc794321(v=WS.10).aspx

For 2003
http://technet.microsoft.com/en-us/library/cc787329(v=WS.10).aspx

It is same similar for all server versions since 2003
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 23

Author Comment

by:ormerodrutter
ID: 40356833
I know about shadow copies but I believe it has to be applied at ROOT directory? We have over 400GB+ of data and only 120GB space left on the file server. So not sure if Shadow Copy could help if we try to avoid buying additional storage. Also, Shadow copies involves with taking snapshots on the system at a set time - files are sometimes being changed by various staffs on regular intervals.

I see Shadow copies would help file restore, but not preventing accidentally deletion.
0
 
LVL 21

Expert Comment

by:Larry Struckmeyer MVP
ID: 40356976
But, following accidental deletion, recovery is a snap.  But I wish you luck on solving the original question.
0
 
LVL 23

Author Comment

by:ormerodrutter
ID: 40363159
I am actually trailing the Undelete10 software you suggested. Looks good so far. Thanks for that. You have my points :)
0

Featured Post

Why spend so long doing email signature updates?

Do you spend loads of your time carrying out email signature updates? Not very interesting are they? Don’t let signature updates get you down. Let Exclaimer Cloud - Signatures for Office 365 make managing email signatures a breeze.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Restore DNS Record 5 71
Server 2008 Software Raid 1, Upgrading Drives 8 67
ESXI home lab network setup (KISS) 12 127
DHCP Server Service stops on SBS 2011 3 33
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now