Re: Deny folders creation/deletion without altering files accesses



Congratulations. Pat yourself on the back. Like I said very few people
understand or can figure out special permissions. -- Steve


"Seb" <Seb@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E4F67FE3-C833-4642-9C51-F2BB49946464@xxxxxxxxxxxxxxxx
> yes that's exactly it Steven, I first didn't know one group/person could
> be
> in there twice, when I realised that I did a test, but like i said it was
> on
> an existing structure where files did not inherit from their parent
> folder,
> and that's what it didn't work. now with a new test on a fresh structure
> it's
> fine! thx! :D
>
> "Steven L Umbach" wrote:
>
>> The key to special permissions is to realize that a user/group can be
>> shown
>> more than once for special permissions for the different possibilities in
>> the "apply onto" box. For example look at the special permissions for the
>> root folder of any default install of Windows XP pro. What I would do is
>> on
>> the general security page for the folder give the group
>> read/list/execute.
>> The general page generic security options are for "folders, subfolders,
>> and
>> files". Then go into advanced permissions and select edit for that group
>> for
>> folder, subfolders, and files and also check create files/append data.
>> While
>> still in special permissions select add and then add the group again and
>> select everything but full control/change permissions/take ownership and
>> then select "files only" in the apply onto box. See if that helps or not.
>> Don't feel embarrassed as I have found VERY few that know how to
>> configure
>> special permissions. --- Steve
>>
>>
>> "Seb" <Seb@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:6A8371A7-9358-482E-BF9F-7C2FC4CCCD75@xxxxxxxxxxxxxxxx
>> > Hi all,
>> >
>> > I'm a bit embarassed to ask this kind of question but I don't seem to
>> > be
>> > able to work it out myself...
>> >
>> > One of our users manages a folder on our public drive that has very
>> > limited
>> > access, some groups have read only access, some can write in certain
>> > folders,
>> > some in others etc... a real nightmare ;)
>> >
>> > The structure worked fine until we reaslised people could actually mess
>> > it
>> > up by creating their own folders etc... so I've been asked to change
>> > the
>> > accesses and prevent people from creating or deleting directories,
>> > however,
>> > in the Advanced Security Settings window, when denying "Create Folder"
>> > we
>> > also deny "Append Data", and every file we open is opened in read only
>> > mode.
>> >
>> > Is there any way of denying creation and deletion of folders while
>> > still
>> > allowing creation and edition of files?
>> >
>> > Thank you.
>> >
>> > Regards,
>> >
>> > Sébastien de Salvador
>>
>>
>>


.



Relevant Pages

  • Re: KB893803 error code 0x80070005
    ... I was not aware of any limitation of my User Profile. ... could not open any System Volume Information folder. ... Profile enabled me to take ownership of one System Volume Information ... of one series of folders and needed Special Permissions to regain ...
    (microsoft.public.windowsupdate)
  • Re: KB893803 error code 0x80070005
    ... suggestion worked and the OP's Windows Installer installation issue is history. ... could not open any System Volume Information folder. ... Profile enabled me to take ownership of one System Volume Information ... of one series of folders and needed Special Permissions to regain ...
    (microsoft.public.windowsupdate)
  • Re: Folder Security Issue
    ... What you need to look at is to possibly use special permissions [in advanced ... configured is on the drive/root folder of an XP Pro computer. ... compared to the long term security of people not dragging and dropping ...
    (microsoft.public.windows.server.security)
  • Re: Deny folders creation/deletion without altering files accesses
    ... The key to special permissions is to realize that a user/group can be shown ... the general security page for the folder give the group read/list/execute. ... > Is there any way of denying creation and deletion of folders while still ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Deny folders creation/deletion without altering files accesses
    ... > accesses from their parent folder. ... In the advanced security settings options, add a group, the permission ... > inherit the rights from their parents folder... ... >> accesses and prevent people from creating or deleting directories, however, ...
    (microsoft.public.windowsxp.security_admin)