General discussion

Locked

"Deny Delete" permission does not work.

By tcota ·
Here is the scenario.

I have users accessing a Windows 2000 NTFS share from across the network. Everyone has "List Folder Contents" at the root of the share. Off of the root, there is a directory called PROJECTS. Everyone is assigned "Modify" at the PROJECTS level with one exception...under advanced permissions, users are only allowed to delete subfolders and files but not the PROJECTS directory itself.

If a user goes to the root of the share, highlights the PROJECTS directory, and presses delete, all of the data will be deleted from the directory before they get an "Access Denied" error. Even if I place a directory under PROJECTS and explicitly deny the delete permission to the Everyone group, users can still empty the entire directory.

Is this by design, or is there any other way to restrict users from "accidentally" deleting all of the data in PROJECTS? I though a deny permission always overwrites an allow permission.

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

"Deny Delete" permission does not work.

by timwalsh In reply to "Deny Delete" permission ...

You sort of answered your own question. In your first paragraph, you state ". . , users are only allowed to delete subfolders and files but not the PROJECTS directory itself." If you apply Deny Delete permissions to the PROJECT folder, but do not Apply Deny Delete Subfolders and Files, then ANYTHING under the PROJECT folder is subject to deletion. It appears that all you have done is deny the ability to delete the PROJECT folder itself, even though it gives the appearance of being applied to"This folder, subfolders, and files" as shown in the "Apply onto" window.

Collapse -

"Deny Delete" permission does not work.

by tcota In reply to "Deny Delete" permission ...

Oops, I guess I need to clarify one thing. The folder with the explicit deny is a sub-folder of PROJECTS. So, if I have the right to delete sub-folders of PROJECTS, but have "Deny Delete" assigned to one of those sub-folders, the explicit deny does not take precedence. If I highlight PROJECTS and press delete, the sub-folder with the explicit deny delete is actually deleted.

Collapse -

"Deny Delete" permission does not work.

by Gigelul In reply to "Deny Delete" permission ...

For subfolders of the Project folder when set the permisions remove <allow inheritable permissions...>. After that set as you wish the permissions for this subfolder.

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Forums