Trying to delete protected folder deletes contents
- From: maike13@xxxxxxxxxxxxx
- Date: 25 Apr 2007 06:39:42 -0700
I want to have a folder on our server that users have modify rights
in, but where they can't delete the folder itself. Sounds simple but
I hit a glitch that's driving me nuts.
Here's what I did.
I am using a domain account called TestUser for testing purposes.
TestUser is in the servers Users group.
I am using a domain account called TestAdmin to create the folders and
set permissions. TestAdmin in is the servers Administators group.
I created a folder on the server called Tests and set only two
permissions. List Folder Contents for TestUser and Full control for
TestAdmin. Tests does not inherit any permissions.
Inside the Tests folder I created a folder called Reports (this is the
folder that I want TestUser to have modify right in but not be able to
delete the Reports folder itself). I gave Reports only the following
three permissions.
Full control for TestAdmin.
Modify applied onto Subfolders and files only for TestUser.
Modify but with delete unchecked applied onto This folder only for
TestUser.
Reports does not inherit any permissions
I then shared the Tests folder with a share permission of Full
Control for Everyone.
When I test this by logging onto the server locally as TestUser
everything works just like I want. I can create, rename, delete etc.
anything in Reports just like it should with Modify permissions, and
anything I create, copy or save in the Reports folder inherits the
Modify permission for TestUser. When I try to delete the Reports
folder, I am denied from deleting it (which is what I want to happen)
and the delete attempt has no effect on the folders and files in
Reports. Perfect!!!
Then I test it by logging onto a desktop PC as TestUser, with TestUser
in the Users group on the desktop PC. Then I connect to the Tests
share I created on the server and try the Reports folder. Again
everything works just as I want EXCEPT, when I try and delete the
Reports folder, while the delete is again denied and the Reports
folder is not deleted, everything in the Reports folder is deleted.
This is very bad and not at all what I want to happen :-)
Anyone know why this works when logged on to the server locally but
not when accessing the server via the share? And how do I get ti to
work when using the share?
The Server is running Windows 2000 Advanced Server SP4. The PC I'm
using to connect over the network is running Windows XP Pro SP2
.
- Prev by Date: Re: Disabling Administrator Acount
- Next by Date: How do I resolve an EVENT ID 1000 error?
- Previous by thread: Disabling Administrator Acount
- Next by thread: How do I resolve an EVENT ID 1000 error?
- Index(es):
Relevant Pages
|
|
