Security·4,716 discussions

Delete permission on NTFS sharing

Locked

Dear , If I have a shared Folder with many subfolders and files and i would to share for my network users , i need to know how should i set the share and ntfs permission so users can modify the contents of exisiting files and save them and create new files and save them and in the same time users can’t completely delete any file or folder.

Many Thanks.

Topic

Reply To: Delete permission on NTFS sharing

In reply to Delete permission on NTFS sharing

Sorry to say, but you can’t.
If you give the rigths to modify then the users become owner of the file and he/she can delete the file also.

Reply To: Delete permission on NTFS sharing

In reply to Reply To: Delete permission on NTFS sharing

ungle,

If we discuss about MS Office documents you are wrong. When you edit a document, automatically all changes are stored in a “temp” file. When you finish to edit the document and you want to save the changes, the original file is DELETED and the “temp” file take the name of the original file and is saved in the same location.

You can’t change this mechanism.
So, you need to give to the user the DELETE right if you want to allow the user to work.

Reply To: Delete permission on NTFS sharing

In reply to Delete permission on NTFS sharing

Here’s what you want to do:

For share level permissions, everyone gets full control. In NTFS we don’t try to control security from the share level.

On NTFS permissions, add the user group for which you want to apply permissions. By default they will get Read & Execute, List Folder Contents and Read permissions. Also add Write permissions. Apply the permissions.

To be sure you don’t have something funny on the Security Descriptor, click the Advanced button. Find the entry you’ve just created and make sure it says Apply To: This folder, sub folders and files. If not you can edit this ACE to apply this flag.

That’s it! The security group now has rights to create/modify files and folders but will not be able to delete them.

Reply To: Delete permission on NTFS sharing

In reply to Delete permission on NTFS sharing

you do need to give users delete file permissions if you want to allow them to edit files and save the changes. As florian stipulated, word creates that temp file then deletes it when applying the changes etc.
So basically set the permissions using NTFS and then just give them full control from the share point of view. So you control access from NTFS, its simpler.

[Author]

Replies