Click here to get back home

How to not allow user move folders accidentially in MS server 2003?

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
How to not allow user move folders accidentially in MS server 2003? Ken 01-31-2008
Posted by Ken on January 31, 2008, 4:33 am
Please log in for more thread options
Dear all,

Anyone have solution to not allow user move folders into another folder
accidentially in MS server 2003?
We are using share folder options to every folders but any users can drag
folders to move into another folder very easy.

Thanks in advance!

--
Regards,

Ken Luk




Posted by Roger Abell [MVP] on January 31, 2008, 9:14 am
Please log in for more thread options
> Dear all,
>
> Anyone have solution to not allow user move folders into another folder
> accidentially in MS server 2003?
> We are using share folder options to every folders but any users can drag
> folders to move into another folder very easy.
>
> Thanks in advance!
>
> --
> Regards,
>
> Ken Luk

The most close thing to a real solution is user education.

You can set the folders so that they cannot delete them by
use of their NTFS permissions, such as granting only List
on the folders, but that does not solve the underlying issue.
If they do not have delete on the folders they can still drag
and drop the folder to somewhere, and they cause a copy
to get set up there and all that they can delete removed
from the original location, which is just as bad as if they
had successfully moved everything (perhaps worse).

There is no technical solution to this since copy is not
treated as a transacted, atomic action, and so as much as
can happen will happen.

Roger



Posted by Al Dunbar on February 1, 2008, 5:26 pm
Please log in for more thread options

>> Dear all,
>>
>> Anyone have solution to not allow user move folders into another folder
>> accidentially in MS server 2003?
>> We are using share folder options to every folders but any users can drag
>> folders to move into another folder very easy.
>>
>> Thanks in advance!
>>
>> --
>> Regards,
>>
>> Ken Luk
>
> The most close thing to a real solution is user education.
>
> You can set the folders so that they cannot delete them by
> use of their NTFS permissions, such as granting only List
> on the folders, but that does not solve the underlying issue.
> If they do not have delete on the folders they can still drag
> and drop the folder to somewhere, and they cause a copy
> to get set up there and all that they can delete removed
> from the original location, which is just as bad as if they
> had successfully moved everything (perhaps worse).
>
> There is no technical solution to this since copy is not
> treated as a transacted, atomic action, and so as much as
> can happen will happen.
>
> Roger

The question was how to prevent users from moving folders accidentally,
which would imply that they should be allowed to move folders if they are
doing it on purpose. If that is what he meant, the answer is that this is
impossible. If you can find any way to keep people from making mistakes, the
same software could probably do their work for them. ;-)

/Al



Posted by Roger Abell [MVP] on February 2, 2008, 2:05 am
Please log in for more thread options
>
>>> Dear all,
>>>
>>> Anyone have solution to not allow user move folders into another folder
>>> accidentially in MS server 2003?
>>> We are using share folder options to every folders but any users can
>>> drag folders to move into another folder very easy.
>>>
>>> Thanks in advance!
>>>
>>> --
>>> Regards,
>>>
>>> Ken Luk
>>
>> The most close thing to a real solution is user education.
>>
>> You can set the folders so that they cannot delete them by
>> use of their NTFS permissions, such as granting only List
>> on the folders, but that does not solve the underlying issue.
>> If they do not have delete on the folders they can still drag
>> and drop the folder to somewhere, and they cause a copy
>> to get set up there and all that they can delete removed
>> from the original location, which is just as bad as if they
>> had successfully moved everything (perhaps worse).
>>
>> There is no technical solution to this since copy is not
>> treated as a transacted, atomic action, and so as much as
>> can happen will happen.
>>
>> Roger
>
> The question was how to prevent users from moving folders accidentally,
> which would imply that they should be allowed to move folders if they are
> doing it on purpose. If that is what he meant, the answer is that this is
> impossible. If you can find any way to keep people from making mistakes,
> the same software could probably do their work for them. ;-)
>
> /Al
>

Nice observation Al. We could probably also use that accident
prevention technique to prevent all stubbed toes, all lost keys,
all misunderstandings, even all war.

If only Move (I misspoke and said Copy in first post) had been
viewed as a single action and not implemented as an untransacted
sequence of Copy+Delete when Kutler designed this ! Another
place where simplicity of implementation (reuse) bites.

Roger



Posted by Al Dunbar on February 3, 2008, 1:31 pm
Please log in for more thread options

>>
>>>> Dear all,
>>>>
>>>> Anyone have solution to not allow user move folders into another folder
>>>> accidentially in MS server 2003?
>>>> We are using share folder options to every folders but any users can
>>>> drag folders to move into another folder very easy.
>>>>
>>>> Thanks in advance!
>>>>
>>>> --
>>>> Regards,
>>>>
>>>> Ken Luk
>>>
>>> The most close thing to a real solution is user education.
>>>
>>> You can set the folders so that they cannot delete them by
>>> use of their NTFS permissions, such as granting only List
>>> on the folders, but that does not solve the underlying issue.
>>> If they do not have delete on the folders they can still drag
>>> and drop the folder to somewhere, and they cause a copy
>>> to get set up there and all that they can delete removed
>>> from the original location, which is just as bad as if they
>>> had successfully moved everything (perhaps worse).
>>>
>>> There is no technical solution to this since copy is not
>>> treated as a transacted, atomic action, and so as much as
>>> can happen will happen.
>>>
>>> Roger
>>
>> The question was how to prevent users from moving folders accidentally,
>> which would imply that they should be allowed to move folders if they are
>> doing it on purpose. If that is what he meant, the answer is that this is
>> impossible. If you can find any way to keep people from making mistakes,
>> the same software could probably do their work for them. ;-)
>>
>> /Al
>>
>
> Nice observation Al. We could probably also use that accident
> prevention technique to prevent all stubbed toes, all lost keys,
> all misunderstandings, even all war.
>
> If only Move (I misspoke and said Copy in first post) had been
> viewed as a single action and not implemented as an untransacted
> sequence of Copy+Delete when Kutler designed this ! Another
> place where simplicity of implementation (reuse) bites.

Yes, there still are vestiges of things that are so because that is how it
looks from the computer's side of things. A folder move within a volume
generally does not require any movement of data, just of pointers in the
file system. a move across volume boundaries obviously cannot work the same
way.

So not only is it done as a series of losely coordinated but not atomic
events, the difference shows up in the default drag-and-drop option: move if
to the same volume, copy if to a different one. But for those of us who have
been around a while this almost makes sense, as moves within a volume are
more likely to be moves than copies, whereas between volumes it is more
likely to be a copy.

/Al



Similar ThreadsPosted
user restrictions accessing server based folders using the SBS 200 March 16, 2006, 6:46 am
Re: Move Enterprise CA server December 18, 2007, 8:48 am
file server move from win2000 to win2003 April 24, 2008, 9:50 pm
user secuity inwindows 2003 server November 22, 2006, 6:04 am
Create restricted user account, 2003 server AD domain November 10, 2005, 10:39 pm
What has Windows 2003 Server security done to domain user profiles January 17, 2006, 11:49 pm
plz help to creating a windows server 2003 domain member user April 7, 2007, 3:08 am
User folders permissions. June 7, 2007, 3:40 pm
Accessing folders owned by another user? December 6, 2007, 1:46 pm
Finding folders where user was specifically given access September 11, 2006, 1:45 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap