Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!
Windows Modify Permissions
Windows Modify Permissions
Wanted to know if I give a user Modify Permissions on Folder1, whether they will be able to copy folder1 to another location.
Thank you
Wanted to know if I give a user Modify Permissions on Folder1, whether they will be able to copy folder1 to another location.
Thank you
Do more with
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
You will need to create custom permission for this user that will allow him to view, read, edit, delete content not top folder
You will need to create custom permission for this user that will allow him to view, read, edit, delete content not top folderhow to do that ?
I see you asked this question before and accepted a solution;
https://www.experts-exchange.com/questions/29008226/Modify-Permissions-in-Windows-Folders.html
Did this not work for you?
https://www.experts-exchange.com/questions/29008226/Modify-Permissions-in-Windows-Folders.html
Did this not work for you?
I meant how to set up the permissions that does not allow user to copy folder1 to different location
Depending on what you want for the Folder1 .. you will want to give them the following:
List Folder/ read data
Read Attributes
if they can create new folders or files add:
Create files
Create folders
on the subfolders they will require write attributes to save new files
List Folder/ read data
Read Attributes
if they can create new folders or files add:
Create files
Create folders
on the subfolders they will require write attributes to save new files
If I give Read/write to Folder1 for User1, then:
User1 can create folders and files under Folder1
User1 cannot delete or alter any folder or file created by other users under Folder1
Other users cannot delete or alter any folder or file created by user1
Users can delete or alter only folders and files that they have created by themselves.
Correct ?
User1 can create folders and files under Folder1
User1 cannot delete or alter any folder or file created by other users under Folder1
Other users cannot delete or alter any folder or file created by user1
Users can delete or alter only folders and files that they have created by themselves.
Correct ?
Please click on Manage Permission
Remove all users except domain admin, system and yourself (disable inherities)
Give authenticated users 2 kind of rights
For This folder only give them READ, LIST,and READ PERMISSIONS
For Subfoldedrs and Files give them all other rights if you ant them to be able create new files, modify and delete.
If you want to prevent them from delete then remove delete permission.
Remember that some software (like excel) need to have delete right to modify existing one files.
Remove all users except domain admin, system and yourself (disable inherities)
Give authenticated users 2 kind of rights
For This folder only give them READ, LIST,and READ PERMISSIONS
For Subfoldedrs and Files give them all other rights if you ant them to be able create new files, modify and delete.
If you want to prevent them from delete then remove delete permission.
Remember that some software (like excel) need to have delete right to modify existing one files.
You can not restrict this kind of activity (being able to read, but not copy) using NTFS permissions.
You need a product like Microsoft's Right Management Services (https://technet.microsoft.com/en-us/library/cc772403.aspx), or some other data leak prevention product. Can't advise you on specifics since I haven't used them.
You need a product like Microsoft's Right Management Services (https://technet.microsoft.com/en-us/library/cc772403.aspx), or some other data leak prevention product. Can't advise you on specifics since I haven't used them.
If they have Read access, then the file can be copied.. Unfortunately, NTFS doesn't have a permission like Novell did (filescan) that lets you see the existence of a file, but not read it. If you can read it, you can copy it.
The other key piece of this when you copy a file is what the permissions are on the destination location.. If they have the ability to write at the destination, the copy will complete. All of the other permissions can create various scenarios of how to get to the scenario.
Rights Management is integrated into the documents themselves, not the filesystem..
So.. in your situation, if you want to let them write files, you can either remove the Read permission, or you can add the Read permission and set it to Deny. That would give them a write-only location and they would not be able to copy *from* the directory.
Coralon
The other key piece of this when you copy a file is what the permissions are on the destination location.. If they have the ability to write at the destination, the copy will complete. All of the other permissions can create various scenarios of how to get to the scenario.
Rights Management is integrated into the documents themselves, not the filesystem..
So.. in your situation, if you want to let them write files, you can either remove the Read permission, or you can add the Read permission and set it to Deny. That would give them a write-only location and they would not be able to copy *from* the directory.
Coralon
I did not have a question about Copying..
was trying to understand if my statement below is correct:
If I give Read/write to Folder1 for User1, then:
User1 can create folders and files under Folder1
User1 cannot delete or alter any folder or file created by other users under Folder1
Other users cannot delete or alter any folder or file created by user1
Users can delete or alter only folders and files that they have created by themselves.
Correct ?
was trying to understand if my statement below is correct:
If I give Read/write to Folder1 for User1, then:
User1 can create folders and files under Folder1
User1 cannot delete or alter any folder or file created by other users under Folder1
Other users cannot delete or alter any folder or file created by user1
Users can delete or alter only folders and files that they have created by themselves.
Correct ?
Ok, to accomplish what you are describing..
Give the users Read to "this folder" only
Give the users Create Folders/Append Data to "this folder" only
Give the group "Creator Owner" Modify or Full Control to subfolders/files
This will let the users create their own directories that they will own, and they can modify/copy etc.. everything within that subfolder.
The problem is you can't assign the the Modify to the current directory, because they will be able to modify other users file.
If you'd like, you can assign Creator Owner to that directory also, but you have to be careful who owns the individual files.
Coralon
Give the users Read to "this folder" only
Give the users Create Folders/Append Data to "this folder" only
Give the group "Creator Owner" Modify or Full Control to subfolders/files
This will let the users create their own directories that they will own, and they can modify/copy etc.. everything within that subfolder.
The problem is you can't assign the the Modify to the current directory, because they will be able to modify other users file.
If you'd like, you can assign Creator Owner to that directory also, but you have to be careful who owns the individual files.
Coralon
Premium Content
You need an Expert Office subscription to comment.Start Free Trial