I'm having some difficulty with Win 2000 security. I'm trying to allow users to add and modify files/folders, but without any delete permissions. I give them read & execute permission with write permissions, but when they attempt to modify a file, they receive an 'access denied' popup and a .tmp file is created in its place. As it's a network drive, i am very very hesitant to give them delete permission, due to no recycle bin... any ideas?
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
NTFS file/folder security on network drive 1
- Thread starter treitus
- Start date
-
1
- #2
tcambridge
IS-IT--Management
treitus,
Without the delete permission, users will not be able to delete the temp files that are created when they save the file they are working on.
If you add the CREATOR OWNER group and give them MODIFY permission (includes delete), the user will be able to create and delete folders/files and the temp files that ONLY they create.
For example, set the USERS group set to CHANGE (Read, Write, Execute) and CREATOR OWNER set to MODIFY (Read, Write, Execute, Delete). User JSMITH creates a file called TEST.TXT and becomes the owner and inherently has the delete right on that file. User EJONES creates a file called HOME.TXT and has delete rights on that file. However, they cannot delete the other person's file. Only the person that created it (and anyone else who has the delete right) can delete it. This will also take care of your temp files.
Good Luck!
Tim
Certified AND Qualified
![[thumbsup2]](/data/assets/smilies/thumbsup2.gif "[thumbsup2] [thumbsup2]")
Without the delete permission, users will not be able to delete the temp files that are created when they save the file they are working on.
If you add the CREATOR OWNER group and give them MODIFY permission (includes delete), the user will be able to create and delete folders/files and the temp files that ONLY they create.
For example, set the USERS group set to CHANGE (Read, Write, Execute) and CREATOR OWNER set to MODIFY (Read, Write, Execute, Delete). User JSMITH creates a file called TEST.TXT and becomes the owner and inherently has the delete right on that file. User EJONES creates a file called HOME.TXT and has delete rights on that file. However, they cannot delete the other person's file. Only the person that created it (and anyone else who has the delete right) can delete it. This will also take care of your temp files.
Good Luck!
Tim
Certified AND Qualified
- Thread starter
- #3
tcambridge
IS-IT--Management
Is the Admin group/account in the ACL (Access Control List)?Do you want to go back and add the Admin group/account to the ACL? I'm sure you could accomplish it automatically via scripting and third-party or resource kit tools. If you don't mind my asking, what exactly are you trying to do?
If you already have the permissions set and the Admins have Full Control, no one can change that except other Admins.
On your other comment about deleting files over the network and not having a recycle bin -- you may want to invest in some type of recovery software like OnTrack's EasyRecovery. There may be other packages out there somewhere that will monitor files deleted via network access and keep them in a 'network recycle bin'. EasyRecovery is a great product though. It's saved me a few times!
Good Luck!
Tim
Certified AND Qualified
If you already have the permissions set and the Admins have Full Control, no one can change that except other Admins.
On your other comment about deleting files over the network and not having a recycle bin -- you may want to invest in some type of recovery software like OnTrack's EasyRecovery. There may be other packages out there somewhere that will monitor files deleted via network access and keep them in a 'network recycle bin'. EasyRecovery is a great product though. It's saved me a few times!
Good Luck!
Tim
Certified AND Qualified
- Status
Similar threads
