Managing Active Directory does not always have to be complicated. If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why
Windows Modify Permissions
Windows Modify Permissions
Wanted to know if I give a user Modify Permissions on Folder1, whether they will be able to copy folder1 to another location.
Thank you
Wanted to know if I give a user Modify Permissions on Folder1, whether they will be able to copy folder1 to another location.
Thank you
Who is Participating?
Experts Exchange Solution brought to you by
Enjoy your complimentary solution view.
Get every solution instantly with Premium.
Start your 7-day free trial.
I wear a lot of hats...
"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.
You will need to create custom permission for this user that will allow him to view, read, edit, delete content not top folder
You will need to create custom permission for this user that will allow him to view, read, edit, delete content not top folderhow to do that ?
I see you asked this question before and accepted a solution;
https://www.experts-exchange.com/questions/29008226/Modify-Permissions-in-Windows-Folders.html
Did this not work for you?
https://www.experts-exchange.com/questions/29008226/Modify-Permissions-in-Windows-Folders.html
Did this not work for you?
I meant how to set up the permissions that does not allow user to copy folder1 to different location
Do not see View Only
NTFS.PNG
NTFS.PNG
Depending on what you want for the Folder1 .. you will want to give them the following:
List Folder/ read data
Read Attributes
if they can create new folders or files add:
Create files
Create folders
on the subfolders they will require write attributes to save new files
List Folder/ read data
Read Attributes
if they can create new folders or files add:
Create files
Create folders
on the subfolders they will require write attributes to save new files
If I give Read/write to Folder1 for User1, then:
User1 can create folders and files under Folder1
User1 cannot delete or alter any folder or file created by other users under Folder1
Other users cannot delete or alter any folder or file created by user1
Users can delete or alter only folders and files that they have created by themselves.
Correct ?
User1 can create folders and files under Folder1
User1 cannot delete or alter any folder or file created by other users under Folder1
Other users cannot delete or alter any folder or file created by user1
Users can delete or alter only folders and files that they have created by themselves.
Correct ?
Please click on Manage Permission
Remove all users except domain admin, system and yourself (disable inherities)
Give authenticated users 2 kind of rights
For This folder only give them READ, LIST,and READ PERMISSIONS
For Subfoldedrs and Files give them all other rights if you ant them to be able create new files, modify and delete.
If you want to prevent them from delete then remove delete permission.
Remember that some software (like excel) need to have delete right to modify existing one files.
Remove all users except domain admin, system and yourself (disable inherities)
Give authenticated users 2 kind of rights
For This folder only give them READ, LIST,and READ PERMISSIONS
For Subfoldedrs and Files give them all other rights if you ant them to be able create new files, modify and delete.
If you want to prevent them from delete then remove delete permission.
Remember that some software (like excel) need to have delete right to modify existing one files.
You can not restrict this kind of activity (being able to read, but not copy) using NTFS permissions.
You need a product like Microsoft's Right Management Services (https://technet.microsoft.com/en-us/library/cc772403.aspx), or some other data leak prevention product. Can't advise you on specifics since I haven't used them.
You need a product like Microsoft's Right Management Services (https://technet.microsoft.com/en-us/library/cc772403.aspx), or some other data leak prevention product. Can't advise you on specifics since I haven't used them.
If they have Read access, then the file can be copied.. Unfortunately, NTFS doesn't have a permission like Novell did (filescan) that lets you see the existence of a file, but not read it. If you can read it, you can copy it.
The other key piece of this when you copy a file is what the permissions are on the destination location.. If they have the ability to write at the destination, the copy will complete. All of the other permissions can create various scenarios of how to get to the scenario.
Rights Management is integrated into the documents themselves, not the filesystem..
So.. in your situation, if you want to let them write files, you can either remove the Read permission, or you can add the Read permission and set it to Deny. That would give them a write-only location and they would not be able to copy *from* the directory.
Coralon
The other key piece of this when you copy a file is what the permissions are on the destination location.. If they have the ability to write at the destination, the copy will complete. All of the other permissions can create various scenarios of how to get to the scenario.
Rights Management is integrated into the documents themselves, not the filesystem..
So.. in your situation, if you want to let them write files, you can either remove the Read permission, or you can add the Read permission and set it to Deny. That would give them a write-only location and they would not be able to copy *from* the directory.
Coralon
I did not have a question about Copying..
was trying to understand if my statement below is correct:
If I give Read/write to Folder1 for User1, then:
User1 can create folders and files under Folder1
User1 cannot delete or alter any folder or file created by other users under Folder1
Other users cannot delete or alter any folder or file created by user1
Users can delete or alter only folders and files that they have created by themselves.
Correct ?
was trying to understand if my statement below is correct:
If I give Read/write to Folder1 for User1, then:
User1 can create folders and files under Folder1
User1 cannot delete or alter any folder or file created by other users under Folder1
Other users cannot delete or alter any folder or file created by user1
Users can delete or alter only folders and files that they have created by themselves.
Correct ?
Ok, to accomplish what you are describing..
Give the users Read to "this folder" only
Give the users Create Folders/Append Data to "this folder" only
Give the group "Creator Owner" Modify or Full Control to subfolders/files
This will let the users create their own directories that they will own, and they can modify/copy etc.. everything within that subfolder.
The problem is you can't assign the the Modify to the current directory, because they will be able to modify other users file.
If you'd like, you can assign Creator Owner to that directory also, but you have to be careful who owns the individual files.
Coralon
Give the users Read to "this folder" only
Give the users Create Folders/Append Data to "this folder" only
Give the group "Creator Owner" Modify or Full Control to subfolders/files
This will let the users create their own directories that they will own, and they can modify/copy etc.. everything within that subfolder.
The problem is you can't assign the the Modify to the current directory, because they will be able to modify other users file.
If you'd like, you can assign Creator Owner to that directory also, but you have to be careful who owns the individual files.
Coralon
Experts Exchange Solution brought to you by
Your issues matter to us.
Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.
Start your 7-day free trialIt's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008
From novice to tech pro — start learning today.
-
Microsoft ApplicationsCertification: MCSE Microsoft Certified Systems Engineer - Identity … 440 lessons
Experts Exchange Solution brought to you by
Enjoy your complimentary solution view.
Get every solution instantly with Premium.
Start your 7-day free trial.