folder permissions

[wile666]

I have struggled with this problem in past on a NT4 domain, but have recently upgraded to SBS2003. I have shared folders that currently everyone has full access to. I want to be able to allow users to access to modify files and run programs, but not to add or delete folders. So far I have not been able to find a way to do this. If I remove Delete from the permissions, than they don't seem to have access to run the programs and cannot change files.

The folder structure is setup with the share at the top level (Clients)and mapped for easy access. Under the top level are several other folders each with many levels of folders under them. ie Clients\individuals\companyname\2005\accounting\workpapers.
They need to be able to access and change the files in the workpapers directory. But right now they also have access to create and god help me, delete any of thoes folders. That is what I want to restrict.

 

[markdmac]

You need to use the Advanced NTFS permissions. Setting permissions that way will allow you to specify Deny on the delete permission for all SubFolders.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[wile666]

Thanks. Along with denying create folder that fixes my problem. Microsoft makes it confusing because it also says file, but it doesn't seem to affect the creation or deletion of files.