Stop users from making folders...but allow all file access

Server 2016,

Setting up a new domain, we want users to be unable to make folders.  We want them to have "full control" to all files in the specific folder.  My Google-fu is weak, having trouble with finding something that will work.  

I have dug and dug, and can come up with nothing that works.

I have tried working with this permissions settings....

Nothing I can come up with will let a user make, edit,delete,copy....you name it to a file and not let them make a folder.....no folders are to be made, everything else can be done.

I am pulling out what is left of my hair....thanks.
Capture.PNG
CCSO691Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

KimputerCommented:
You're almost there! It's the Show Advanced Permission function that you need (mid-right of the screenshot).
1
CCSO691Author Commented:
If I take away create folders / append data they still have the ability to make new files, but can not change existing files....for my test I would make a text document, but if I try to rename it I can't, if I add more text inside the document it will not allow me to over wright the existing file...I can save it as a new file....not exactly what I want.




next permission window
0
KimputerCommented:
You're actually correct. For a file system, what you want is inherently the same (create folder = append data, and that's what you wanted to seperate), even in plain language it's not. It means, it's just not possible what you want in the current NTFS systems.
0
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

CCSO691Author Commented:
Do you know of any other options/work around ideas.....I can't be the first one to hit this....and a simple google search will give you tons of hits saying....How to keep users from dumping junk in your folder structure.

Any 3rd party tools that do this?

I finally got to setup a new domain on all new hardware with all new users, new exchange.....new EVERYTHING.....you know how hard that was to push through.....I really want to set this thing up correct and clean for the long term....and keep it clean.

I was going to make all users send in a change request for any new folders....this would keep the junk down to just their home folders and I wanted to quota that if I could....don't think that works the way I want as well.

As an example....and no kidding, I have found 4 copies of a 24GB training video in different places on the network.....I want to minimize that as much as possible.

Thanks guys and thanks for letting me rant a little bit.
0
KimputerCommented:
I have no software alternative, though I might not even suggest it if it was available (well, maybe if it was totally free).
First step is to get this through management, to get users educated. That way, you might not even need software.
But if I would develop something, I would make my own app. It would delete every folder the moment it was created. Though I didn't test it with a folder move yet (maybe file locks, maybe user error)
0
CCSO691Author Commented:
Ok....Here is what we ended up doing and it seems to be working

For the files, set like this they can create, edit, delete....whatever you want.
file

For folders they can not make any new ones.
folder
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
CCSO691Author Commented:
it could not be more screwy if Microsoft tried.
0
CCSO691Author Commented:
You can make two "rules" one for files and one for folders....very "microsoft"
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2016

From novice to tech pro — start learning today.