Re: Folder Security Issue



What you need to look at is to possibly use special permissions [in advanced
security] and in that case you will see you have many options for
permissions in the apply onto drop down box [folders, subfolders, and files
and combinations thereof] and users/groups can have different permissions
for each set available. At first this is kind of hard to figure out if you
have not used special permissions before but a good place to see it
configured is on the drive/root folder of an XP Pro computer. For instance
you could try to deny write [or implicit lack of write] for create folders
to the root folder only of each project. While that may help it may not be
able to do completely what you want to do as a user can move a folder as
long as he has delete folder permission at the source and write/create
folder at the destination but it may stop most accidental drag and drops.

Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419 --- using
NTFS special permissions


"Bill" <Bill.Eth0@xxxxxxxxx> wrote in message
news:1193928834.633255.303320@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Having been through various posts about NTFS and trying many things I
don't think I can do this with anything simple and easy for I am
looking for some solutions.

Here is the situation
\\DFS\Projects 2007\Project #1
\\DFS\Projects 2007\Project #2
\\DFS\Projects 2007\Project #3

I need to figure out a way so that you cannot MOVE any Project folder,
its subfolder or files to a different project.

All projects of a given year all reside on the same volume on the
server.

I have managed to get it so users cannot delete or move specific
folders, but I need them to be able to move them around and delete
them within the project.

The users use mapped drives to connect to the DFS root, so I can
afford to have some leeway in how the DFS is structured. Plus any
short term issues of fixing broken files/programs will be nothing
compared to the long term security of people not dragging and dropping
folders where they shouldn't.



.



Relevant Pages

  • Re: KB893803 error code 0x80070005
    ... I was not aware of any limitation of my User Profile. ... could not open any System Volume Information folder. ... Profile enabled me to take ownership of one System Volume Information ... of one series of folders and needed Special Permissions to regain ...
    (microsoft.public.windowsupdate)
  • Re: KB893803 error code 0x80070005
    ... suggestion worked and the OP's Windows Installer installation issue is history. ... could not open any System Volume Information folder. ... Profile enabled me to take ownership of one System Volume Information ... of one series of folders and needed Special Permissions to regain ...
    (microsoft.public.windowsupdate)
  • Re: Deny folders creation/deletion without altering files accesses
    ... understand or can figure out special permissions. ... >> root folder of any default install of Windows XP pro. ... >>> accesses and prevent people from creating or deleting directories, ... >>> Is there any way of denying creation and deletion of folders while ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Deny folders creation/deletion without altering files accesses
    ... The key to special permissions is to realize that a user/group can be shown ... the general security page for the folder give the group read/list/execute. ... > Is there any way of denying creation and deletion of folders while still ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User Cant Rename Folder
    ... For your folder properties for JDK1.4 find the security page and give your ... This is where special permissions are configured. ...
    (microsoft.public.win2000.security)