Security

Ask something
Discussion Locked

Delete permission on NTFS sharing

0 helpful
4 replies

by sdweik

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Dear , If I have a shared Folder with many subfolders and files and i would to share for my network users , i need to know how should i set the share and ntfs permission so users can modify the contents of exisiting files and save them and create new files and save them and in the same time users can't completely delete any file or folder.

Many Thanks.

4 replies

by gigelul

Sorry to say, but you can't.
If you give the rigths to modify then the users become owner of the file and he/she can delete the file also.

by gigelul

ungle,

If we discuss about MS Office documents you are wrong. When you edit a document, automatically all changes are stored in a "temp" file. When you finish to edit the document and you want to save the changes, the original file is DELETED and the "temp" file take the name of the original file and is saved in the same location.

You can't change this mechanism.
So, you need to give to the user the DELETE right if you want to allow the user to work.

by ungle

Here's what you want to do:

For share level permissions, everyone gets full control. In NTFS we don't try to control security from the share level.

On NTFS permissions, add the user group for which you want to apply permissions. By default they will get Read & Execute, List Folder Contents and Read permissions. Also add Write permissions. Apply the permissions.

To be sure you don't have something funny on the Security Descriptor, click the Advanced button. Find the entry you've just created and make sure it says Apply To: This folder, sub folders and files. If not you can edit this ACE to apply this flag.

That's it! The security group now has rights to create/modify files and folders but will not be able to delete them.

by robertm

you do need to give users delete file permissions if you want to allow them to edit files and save the changes. As florian stipulated, word creates that temp file then deletes it when applying the changes etc.
So basically set the permissions using NTFS and then just give them full control from the share point of view. So you control access from NTFS, its simpler.

This discussion is closed to new replies.