Removing delete permission 1

[JustWakinUp]

Hello guys/gals

I've been chasing my tail now for about an hour so please help me catch it.
What i have going on is a share named Engineering, on the permissions i have added the domain users group with full control. On the security tab i have the Engineering group added with the following permissions.
1)Read & Execute
2)List Folder
3)Read
4)Write

Now as we all know in order for a client to be able to create and rename a folder they need to have modify permissions as well, this is where the nightmare begins.
I added modify permissions to the Engineering group which in turn gives them delete as well ( THiS IS A PROBLEM) which i do not want them to have. So i went into advanced and selected the engineering group and removed the delete permission. At this point Im thinking I got it figured and this is going to work.

NOPE ! ! It didn't, what happened was that all it actually did was remove my modify on the security of the Engineering group disabling them from renaming. So i thought i would enable modify again and go into advanced and deny the delete to see if it would work. AGAIN it didn't work.

I thought i would check into the CREATOR OWNER group and see about taking away permissions there but it acts the same as the above problem. I went as far as removing the CREATOR OWNER but all that did was disable the delete and rename also.

Bottom line is this, I want a share that has permissions such as read,write,execute etc, but i also want the clients to be able to rename their files because more than one client will be accessing and changing the same file (not at the same time). However I do not want them to have DELETE permissions.

Can someone please tell me the configuration for how to make this possible so I can stop running around in circles, I'm quite dizzy now..........

 

[markdmac]

JustWakinUp, as you have already discovered, the ability to delete is a modify right and I have yet to see a way to seperate the two.

Since you are on Win2K3, you have some options that might help you to at least keep your data safe. You can enable ShadowCopy on the volume storing the files.

You can also move your files to a document library in Windows Sharepoitn Services. This will give you some additional options since you can set people up as contributing editor.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[JustWakinUp]

Thank you for the reply Mark.

My name is Mark as well. I've spent the better half of my day trying to work this out. I know you can do it with Windows 2000 server simply by manipulating the share permissions. With 2003 it is very different and I am unable to get it situated.

It appears that with windows 2003 server it's either all or nothing with the modify which is a large issue for me because I need to keep the employees safe from themselves. If you could suggest a few ways of doing this I would greatly appreciate it and any guidance on this matter is welcome... Thanks Mark...For now I'm off to sleep 1:30am EST

 

[markdmac]

If you are just looking to protect the users from themselves, have you given the ShadowCopy any thought? It would let you or your users get back past versions of files. And it is really easy to set up.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark