Click here to get back home

Prevent Folder moving
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Prevent Folder moving Gerry Armstrong 07-11-2005
Posted by Gerry Armstrong on July 11, 2005, 9:17 am
Please log in for more thread options
 I have a problem relating to folders that I would like some assistance with.
What is happening is that some users of my Windows 2003 server have a habit
of moving folders around by mistake and then complaining that they can't
find their data. Is there a way of preventing folders from being moved? I
know that I can set the access to the folder as read only but that is a very
long process as there are hundreds of folders and users create more daily.
Any suggestions?




Posted by Steven L Umbach on July 11, 2005, 11:57 am
Please log in for more thread options
 You would need to prevent users from having delete permissions for the
folders. If this is a folder structure that users inherited permissions at
the top folder you may be able to do such by modifying the special
permission for delete for apply onto "folders and subfolders only". You
could give deny delete to users but that would also include administrators
so you may want to create a group that only includes the users involved.

If this is a folder structure that does use inherited permissions from the
top folder you still may be able to do such with a command line tools such
as fileacl as shown in the link below along with it's syntax.

http://www.gbordier.com/gbtools/fileacl.htm

WARNING: Command line tools like fileacl are very poweful/complex and can
messup you permissions badly if not used correctly. If you want to try it be
sure to first tweak the command syntax your are going to use on a test
computer and do a full image type backup of your server BEFORE you try to
change NTFS permissions via the command line. --- Steve

>I have a problem relating to folders that I would like some assistance
>with. What is happening is that some users of my Windows 2003 server have a
>habit of moving folders around by mistake and then complaining that they
>can't find their data. Is there a way of preventing folders from being
>moved? I know that I can set the access to the folder as read only but that
>is a very long process as there are hundreds of folders and users create
>more daily. Any suggestions?
>




Posted by Olaf Engelke [MVP Windows Serv on July 11, 2005, 4:14 pm
Please log in for more thread options
Hi Gerry,
Gerry Armstrong wrote:
> I have a problem relating to folders that I would like some
> assistance with. What is happening is that some users of my Windows
> 2003 server have a habit of moving folders around by mistake and then
> complaining that they can't find their data. Is there a way of
> preventing folders from being moved? I know that I can set the access
> to the folder as read only but that is a very long process as there
> are hundreds of folders and users create more daily. Any suggestions?

you mean that infamous misdoubleclick in Windows Explorer causing the folder
to disappear in the next folder without any warning?

Unfortunately I have also found no way, since folder hierarchies are rarely
static.
Maybe the Windows Explorer in the next generation could take care of it, but
this depends on Microsoft finally.

Best greetings from Germany
Olaf.



Posted by Gerry Armstrong on July 11, 2005, 10:36 am
Please log in for more thread options

> Hi Gerry,
> Gerry Armstrong wrote:
>> I have a problem relating to folders that I would like some
>> assistance with. What is happening is that some users of my Windows
>> 2003 server have a habit of moving folders around by mistake and then
>> complaining that they can't find their data. Is there a way of
>> preventing folders from being moved? I know that I can set the access
>> to the folder as read only but that is a very long process as there
>> are hundreds of folders and users create more daily. Any suggestions?
>
> you mean that infamous misdoubleclick in Windows Explorer causing the
> folder to disappear in the next folder without any warning?
>
> Unfortunately I have also found no way, since folder hierarchies are
> rarely static.
> Maybe the Windows Explorer in the next generation could take care of it,
> but this depends on Microsoft finally.
>
> Best greetings from Germany
> Olaf.
Yes that is exactly the problem and a big one it can be as well especially
if there are some programs that hate not to be able to find specific files
in specific locations as they are supposed to be. There must be a way of
doing something about this issue in Group Policy but I have not found
anything either.




Posted by Roger Abell on July 11, 2005, 11:04 pm
Please log in for more thread options
You can prevent changes to the folder hierarchy by controlling the
NTFS premissions granted to the accounts for folder objects.
The problem is, as Steve indicates, if you need to control moving
of only some folders within a larger structure where they should
have the ability to create/move/delete folders at will, then you
need to make explicit permissions on only specific folders, which
might be best done with use of deny on just those folders (specified
as applying to This folder only) within a structure otherwise that
is otherwise dominated by an inherited grant from the top.
So, you would end up doing just as much one by one as with the
use of read-only that you have mentioned. However, the NTFS
permissions could be set using group policy.

--
Roger Abell
Microsoft MVP (Windows Security)

> I have a problem relating to folders that I would like some assistance
with.
> What is happening is that some users of my Windows 2003 server have a
habit
> of moving folders around by mistake and then complaining that they can't
> find their data. Is there a way of preventing folders from being moved? I
> know that I can set the access to the folder as read only but that is a
very
> long process as there are hundreds of folders and users create more daily.
> Any suggestions?
>
>




Similar ThreadsPosted
Prevent folder deletion October 24, 2007, 8:27 am
prevent access to shared folder when not on a domain computer July 11, 2005, 8:50 pm
Moving Enterprise Root CA March 22, 2007, 11:05 am
Moving ACLs to new server May 24, 2007, 12:08 am
Security Right question when copying or moving files September 11, 2006, 2:02 pm
Moving Local Users from one Meber Server to another? April 12, 2007, 12:28 pm
Moving server 2003 CA database file location November 6, 2006, 3:35 pm
Domain Controller Certificates and moving to a new server or removing them? April 23, 2007, 2:42 pm
Moving Standalone CA from Windows 2000, to Windows 2008? March 31, 2008, 10:05 am
View folder nested in other unviewable folder January 15, 2007, 2:24 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap