|
Posted by Roger Abell [MVP] on February 21, 2006, 12:08 am
Please log in for more thread options
If you click on Advanced in the NTFS security dialog you will
notice that you can highlight any ACE and then adjust the objects
to which it applies.
For example, you can grant at the top level to Authenticated Users
AU grant List for this folder (or this, sub, and files)
and then at a departmental level
AU grant Modify for Subfolders and Files
> On our Windows Server 2003, SP1 member server, we have created a hidden,
> shared top-level directory. Below there we created department
> directories.
> We have set the share permissions on the top-level share to Change and
> Read
> for Authenticated Users. Then we created the department directories.
> Those
> directories are not shared. How do we inhibit the deletion and move of
> the
> (department) directory? NTFS permissions will be set using ALGP, but
> users
> with modify rights CAN delete the entire (department) directory. What are
> we
> doing wrong?
>
> Simply put how do we allow individual file deletion, but not the deletion
> of
> the entire department directory?
| 
XML Sitemap