Jump to content

Permissions


ericargyle

Recommended Posts

Root of drive is DEPT. In drive is MATH, ART, and READING. I want members of said groups to have modify rights on all contents in the folder, but not delete the folder itself. I've tried giving DENY rights on DEPT for THIS FOLDER ONLY and applying the special permission DELETE SUBFOLDERS AND FILES. I figured this would take precedence over a potential delete, but doesn't seem to do so. Even with the rule, users can still delete the folder. What is the proper way to accomplish this? Hopefully this post makes sense.

Link to comment
Share on other sites


Some practices are to set up a hidden file in the each folder with different rights but that doesn't deny users to move all others files there. The good practice there is to have backups (like windows shadow copies) in order to be able to restore the folder fast. Perhaps someone has a better solution.

Link to comment
Share on other sites

I my whole career of 5 years working as an Microsoft Systems Administrator I never seen or had to use deny before. If you don't want that someone can delete a folder just don't use the Modify permission.

I would use the special permissions and give them what they need there, and put on inherantance, and If another folder underneath the folder needs an extra group just add it. But don't try to break the inhertance otherwise you will have a hard time troubleshooting in the further.

This might be helpful for you:

File and Folder Permissions

Manage Permissions

By the way, the delete subfolder and files is not included in the modify permission.

Edited by shadowman
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...