Windows Modify Permissions

Windows Modify Permissions

Wanted to know if I give a user Modify Permissions on Folder1, whether they will be able to copy folder1 to another location.

Thank you
jskfanAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Vikas BhatExperienced IT Infrastructure Services/operations ManagerCommented:
Yes they will be able to do it.
0
Tim EdwardsIT Team Lead - Unified Communications & CollaborationCommented:
You will need to create custom permission for this user that will allow him to view, read, edit, delete content not top folder
0
jskfanAuthor Commented:
You will need to create custom permission for this user that will allow him to view, read, edit, delete content not top folder
how to do that ?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tim EdwardsIT Team Lead - Unified Communications & CollaborationCommented:
What version of OS are you using? Is this a file Server?
0
Tim EdwardsIT Team Lead - Unified Communications & CollaborationCommented:
I see you asked this question before and accepted a solution;

https://www.experts-exchange.com/questions/29008226/Modify-Permissions-in-Windows-Folders.html

Did this not work  for you?
0
jskfanAuthor Commented:
I meant how to set up the permissions that does not allow user to copy folder1 to different location
0
Tim EdwardsIT Team Lead - Unified Communications & CollaborationCommented:
Give the user view only on Folder 1 and the correct permissions on the subfolders
0
jskfanAuthor Commented:
Do not see View Only
NTFS.PNG
0
Tim EdwardsIT Team Lead - Unified Communications & CollaborationCommented:
Depending on what you want for the Folder1 .. you will want to give  them the following:

List Folder/ read data
Read Attributes

if they can create new folders or files add:

Create files
Create folders

on the subfolders they will require write attributes to save new files
0
jskfanAuthor Commented:
it sounds like Read/Write
0
jskfanAuthor Commented:
If I give Read/write to Folder1 for User1, then:

User1 can create folders and files under Folder1
User1 cannot delete or alter any folder or file created by other users under Folder1
Other users cannot delete or alter any folder or file created by  user1

Users can delete or alter only folders and files that they have created by themselves.

Correct ?
0
Tom CieslikIT EngineerCommented:
Please click on Manage Permission
Remove all users except domain admin, system and yourself (disable inherities)
Give authenticated users 2 kind of rights

For This folder only give them READ, LIST,and READ PERMISSIONS
For Subfoldedrs and Files give them all other rights if you ant them to be able create new files, modify and delete.
If you want to prevent them from delete then remove delete permission.

Remember that some software (like excel) need to have delete right to modify existing one files.
0
footechCommented:
You can not restrict this kind of activity (being able to read, but not copy) using NTFS permissions.
You need a product like Microsoft's Right Management Services (https://technet.microsoft.com/en-us/library/cc772403.aspx), or some other data leak prevention product.  Can't advise you on specifics since I haven't used them.
0
CoralonCommented:
If they have Read access, then the file can be copied.. Unfortunately, NTFS doesn't have a permission like Novell did (filescan) that lets you see the existence of a file, but not read it.  If you can read it, you can copy it.

The other key piece of this when you copy a file is what the permissions are on the destination location.. If they have the ability to write at the destination, the copy will complete.  All of the other permissions can create various scenarios of how to get to the scenario.  

Rights Management is integrated into the documents themselves, not the filesystem..

So.. in your situation, if you want to let them write files, you can either remove the Read permission, or you can add the Read permission and set it to Deny.  That would give them a write-only location and they would not be able to copy *from* the directory.  

Coralon
0
jskfanAuthor Commented:
I did not have a question about Copying..  

was trying to understand if my statement below is correct:

If I give Read/write to Folder1 for User1, then:

User1 can create folders and files under Folder1
User1 cannot delete or alter any folder or file created by other users under Folder1
Other users cannot delete or alter any folder or file created by  user1

Users can delete or alter only folders and files that they have created by themselves.

Correct ?
0
jskfanAuthor Commented:
The Copy question was Initial question, but suggested Read/Write might be safer
0
CoralonCommented:
Ok, to accomplish what you are describing..

Give the users Read to "this folder" only
Give the users  Create Folders/Append Data to "this folder" only
Give the group "Creator Owner" Modify or Full Control to subfolders/files

This will let the users create their own directories that they will own, and they can modify/copy etc.. everything within that subfolder.
The problem is you can't assign the the Modify to the current directory, because they will be able to modify other users file.
If you'd like, you can assign Creator Owner to that directory also, but you have to be careful who owns the individual files.

Coralon
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jskfanAuthor Commented:
Thank you
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.