Re: NTFS Permissions

If you click on Advanced in the NTFS security dialog you will
notice that you can highlight any ACE and then adjust the objects
to which it applies.
For example, you can grant at the top level to Authenticated Users
AU grant List for this folder (or this, sub, and files)
and then at a departmental level
AU grant Modify for Subfolders and Files

"stephany_2000" <stephany_2000@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3CA6FBD3-F458-403F-80FF-F7C51E24B5E2@xxxxxxxxxxxxxxxx
On our Windows Server 2003, SP1 member server, we have created a hidden,
shared top-level directory. Below there we created department
directories.
We have set the share permissions on the top-level share to Change and
Read
for Authenticated Users. Then we created the department directories.
Those
directories are not shared. How do we inhibit the deletion and move of
the
(department) directory? NTFS permissions will be set using ALGP, but
users
with modify rights CAN delete the entire (department) directory. What are
we
doing wrong?

Simply put how do we allow individual file deletion, but not the deletion
of
the entire department directory?


.