Re: ACL's

From: serverguy (nospammers_at_spambites.com)
Date: 03/09/04


Date: Tue, 9 Mar 2004 12:37:00 -0500

I think the only way you can do it is to go into the advanced permissions
dialog and explicitly "deny" delete for those objects. The problem you will
run into is inheritance. Since child objects inherit permissions from the
parent, if you deny delete on a folder, the files within that folder will
also get deny delete so nobody will be able to delete files. So, you would
need to uncheck the allow inheritable permissions checkbox on the folders
which means each sub-folder will need to have it's own permissions.

Hope this helps

"Apparition" <anonymous@discussions.microsoft.com> wrote in message
news:6c0801c405eb$51966240$a601280a@phx.gbl...
> I have a shared folder on my file server and I need to
> lock down security on it using the ACL's.
>
> I want to give a group of users modify access to all of
> the files within the shared folder and also on all of
> files within it's sub-folders, but I want to restrict them
> from deleting or renaming the actual folder and subfolders
> themselves.
>
> I know that this is theoretically possible under Windows
> 2000 ACL's, but I'm having trouble getting my head round
> exactly what I need to do. Can anyone help?



Relevant Pages

  • Re: folder permissions
    ... groups and something about deny over rides allow. ... groups assigned to this one folder and the same user has diff priv's ... permissions, everyone has full control. ...
    (microsoft.public.windows.server.general)
  • Re: folder permissions
    ... I will have this other folder I am trying to restrict permissions ... say) and "superceed" any NTFS permissions. ... groups and something about deny over rides allow. ... permissions, everyone has full control. ...
    (microsoft.public.windows.server.general)
  • Re: folder permissions
    ... and how the folder structure you require needs to be configured. ... groups and something about deny over rides allow. ... permissions, everyone has full control. ...
    (microsoft.public.windows.server.general)
  • Re: NTFS woes
    ... starting with a grant of Full and subtracting part of it ... gives it and it gets taken away by deny) but this Posix compliance ... On the parent folder I already had unchecked Take Ownership, ... Permissions and Delete. ...
    (microsoft.public.windows.server.security)
  • Re: NTFS style permissions on Linux
    ... Traverse folder / execute file = Allow ... Write Extended Attributes = Deny ... Linux acls do not match windows permissions 1:1, ...
    (alt.linux)