Solved

Windows Permissions - File Share Permission

Posted on 2014-10-20
2
197 Views
Last Modified: 2014-10-20
We have a client that had an employee be fired, the employee deleted all their files from a shared drive.

We had backups so we restored the files, but now the customer wants to make the entire file share only give users the option to change files and not delete it.

I am having issues getting this done.

1. No matter what special permissions I use, the user either cant save the file if they modify it, or they can save and delete the file.
2. If a user creates a file and save it into the drive, then the file has that user on it as full permissions by default.  The properties from the folder above populates down, but adds the user that created it to the folder.

My question is, how does everyone do this?  My suggestion was to have a monthly backup.  It will keep 28 revisions in the cloud so thats 28 months worth on top of the daily backup that is done.

Any suggestions to how we may do this or what is best practice?
0
Comment
Question by:considerscs
2 Comments
 
LVL 22

Accepted Solution

by:
Joseph Moody earned 500 total points
ID: 40392016
You would want to change the creator/owner permission so that they don't have the delete folder/delete file option.

I honestly think your method of backing up and restoring is better. Removing the delete option will be a huge hassle and will lead to file system bloat as users stop cleaning up old stuff.
0
 
LVL 1

Author Comment

by:considerscs
ID: 40392022
Joseph,

Thanks for the information.  You are exactly right in what my thinking is.  I don't like the option of not being able to delete as users cant clean up and from what I have seen so far, temp files arent deleted either.

Thanks for the suggestions.  I am trying to push them to just the backup option.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now