Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

NTFS permissions:  How to recursively apply to content, not to folders?

Posted on 2016-08-02
6
Medium Priority
?
26 Views
Last Modified: 2016-08-22
Hi,

I just spend quite a while thinking up a new filing structure with a customer.  We thought up a rather complex concept on how to store his information and I am now faced with the quest to protect it from accidental movement or deletion of folders.

What I want is this:  Users should be able to read, execute, write, change and delete all content in the pre-defined folders.  They should also be allowed to create new folders, and they may also delete those.  But I want to protect the predefined folders so that users don't delete them.

I realize this can be done by touching each individual folder and setting the permissions accordingly.  Is there a simple way?
0
Comment
Question by:Ralph Scharping
  • 3
  • 2
6 Comments
 
LVL 44

Accepted Solution

by:
Adam Brown earned 1000 total points (awarded by participants)
ID: 41739661
You can add the permissions with the advanced permissions window (Security tab -> Advanced -> add) to set the permission on "This folder and Subfolders only" or "Subfolders Only" as the "Applies To" setting, then select the option to replace permissions on sub folders with inheritable permissions.
0
 
LVL 2

Author Comment

by:Ralph Scharping
ID: 41739712
Does this also work on empty folders?  The entire structure is empty so far.
0
 
LVL 10

Assisted Solution

by:Vince Glisson
Vince Glisson earned 1000 total points (awarded by participants)
ID: 41739717
Yes it will apply to empty folders.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 2

Author Comment

by:Ralph Scharping
ID: 41739719
Great, thanks you two.  I'll try it out tomorrow.
0
 
LVL 2

Author Comment

by:Ralph Scharping
ID: 41758869
Hi everyone,

just wanted to add that I did not manage to get this straight.  The instructions itself were easy enough to follow, but after doing so I had issues with newly created items and folders inside the folders that I "treated" as described above.  At the end users were not able to delete folders that they just created, which is not what I wanted.
I played with it for quite a while, but did not get to where I wanted to be.

Thanks anyway - I guess what I want just can't be done.
Ralph
0
 
LVL 44

Expert Comment

by:Adam Brown
ID: 41764169
No response. Noted answers answer the question sufficiently
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
In this Micro Tutorial viewers will learn how to use Windows Server Backup to create full image of their system. Tutorial shows how to install Windows Server Backup Feature on Windows 2012R2 and how to configure scheduled Bare Metal Recovery backup.…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question