Windows Modify Permissions

jskfan
jskfan used Ask the Experts™
on
Windows Modify Permissions

Wanted to know if I give a user Modify Permissions on Folder1, whether they will be able to copy folder1 to another location.

Thank you
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Vikas BhatExperienced IT Infrastructure Services/operations Manager
Commented:
Yes they will be able to do it.
Tim EdwardsIT Team Lead - Unified Communications & Collaboration
Commented:
You will need to create custom permission for this user that will allow him to view, read, edit, delete content not top folder

Author

Commented:
You will need to create custom permission for this user that will allow him to view, read, edit, delete content not top folder
how to do that ?
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Tim EdwardsIT Team Lead - Unified Communications & Collaboration
Commented:
What version of OS are you using? Is this a file Server?
Tim EdwardsIT Team Lead - Unified Communications & Collaboration
Commented:
I see you asked this question before and accepted a solution;

https://www.experts-exchange.com/questions/29008226/Modify-Permissions-in-Windows-Folders.html

Did this not work  for you?

Author

Commented:
I meant how to set up the permissions that does not allow user to copy folder1 to different location
Tim EdwardsIT Team Lead - Unified Communications & Collaboration
Commented:
Give the user view only on Folder 1 and the correct permissions on the subfolders

Author

Commented:
Do not see View Only
NTFS.PNG
Tim EdwardsIT Team Lead - Unified Communications & Collaboration
Commented:
Depending on what you want for the Folder1 .. you will want to give  them the following:

List Folder/ read data
Read Attributes

if they can create new folders or files add:

Create files
Create folders

on the subfolders they will require write attributes to save new files

Author

Commented:
it sounds like Read/Write

Author

Commented:
If I give Read/write to Folder1 for User1, then:

User1 can create folders and files under Folder1
User1 cannot delete or alter any folder or file created by other users under Folder1
Other users cannot delete or alter any folder or file created by  user1

Users can delete or alter only folders and files that they have created by themselves.

Correct ?
Tom CieslikIT Engineer
Distinguished Expert 2017
Commented:
Please click on Manage Permission
Remove all users except domain admin, system and yourself (disable inherities)
Give authenticated users 2 kind of rights

For This folder only give them READ, LIST,and READ PERMISSIONS
For Subfoldedrs and Files give them all other rights if you ant them to be able create new files, modify and delete.
If you want to prevent them from delete then remove delete permission.

Remember that some software (like excel) need to have delete right to modify existing one files.
Top Expert 2014
Commented:
You can not restrict this kind of activity (being able to read, but not copy) using NTFS permissions.
You need a product like Microsoft's Right Management Services (https://technet.microsoft.com/en-us/library/cc772403.aspx), or some other data leak prevention product.  Can't advise you on specifics since I haven't used them.
CoralonSenior Citrix Engineer

Commented:
If they have Read access, then the file can be copied.. Unfortunately, NTFS doesn't have a permission like Novell did (filescan) that lets you see the existence of a file, but not read it.  If you can read it, you can copy it.

The other key piece of this when you copy a file is what the permissions are on the destination location.. If they have the ability to write at the destination, the copy will complete.  All of the other permissions can create various scenarios of how to get to the scenario.  

Rights Management is integrated into the documents themselves, not the filesystem..

So.. in your situation, if you want to let them write files, you can either remove the Read permission, or you can add the Read permission and set it to Deny.  That would give them a write-only location and they would not be able to copy *from* the directory.  

Coralon

Author

Commented:
I did not have a question about Copying..  

was trying to understand if my statement below is correct:

If I give Read/write to Folder1 for User1, then:

User1 can create folders and files under Folder1
User1 cannot delete or alter any folder or file created by other users under Folder1
Other users cannot delete or alter any folder or file created by  user1

Users can delete or alter only folders and files that they have created by themselves.

Correct ?

Author

Commented:
The Copy question was Initial question, but suggested Read/Write might be safer
Senior Citrix Engineer
Commented:
Ok, to accomplish what you are describing..

Give the users Read to "this folder" only
Give the users  Create Folders/Append Data to "this folder" only
Give the group "Creator Owner" Modify or Full Control to subfolders/files

This will let the users create their own directories that they will own, and they can modify/copy etc.. everything within that subfolder.
The problem is you can't assign the the Modify to the current directory, because they will be able to modify other users file.
If you'd like, you can assign Creator Owner to that directory also, but you have to be careful who owns the individual files.

Coralon

Author

Commented:
Thank you

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial