General discussion

Locked

I need help with file permissions

By amaloney ·
I have a problem with folders on a file server. We have several files on a server that we need to stay in the folders they are currently in. The problem is due to permission the users can cut and paste the files into other folders. This causes all kinds of mayhem when a manager looks for a file that someone has moved to another folder. I do not want the users to be able to move files form one folder to another. I need to give users rights to open a document and modify the document, or create new files in a folder. However I do not want them to be able to move the files or documents to another folder at all.

So can I do this with NTFS permissions? If not is there a third party application that will let me assign those types of permissions.

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Not a technical issue

by stress junkie In reply to I need help with file per ...

People can make copies of any file to which they have read permission.

This is a behavior problem. If managers are getting upset about multiple copies of files with different changes made to each then at least the right people are getting upset. The managers must establish a policy about file updates and copies and that policy must be enforced.

Collapse -

different impression

by apotheon In reply to Not a technical issue

I get a different impression of what's going on. I don't think users are merely copying files: I think they're actually moving them. Of course, there's no way in that computing environment to deny cut/paste permission without also denying write permission, since cut/paste is really just copy (a new copy of the file) and delete (the old copy). Deleting, of course, is just "writing nothing" where there was once something, so having write permissions also grants permission to delete.

As stated, this is a behavioral issue, not a technical issue.

Collapse -

Set "special file permissions"

by pducato In reply to different impression

Settings in the "special file permissions" will allow the administrator to deny delete permissions.

From Microsoft....
To set, view, change, or remove special permissions for files and folders

Open Windows Explorer, and then locate the file or folder for which you want to set special permissions
Right-click the file or folder, click Properties, and then click the Security tab.
Click Advanced, and then do one of the following:
To set special permissions for a new group or user, click Add. In Name, type the name of the user or group using the format domainname\name. When you are finished, click OK to automatically open the Permission Entry dialog box.
To view or change special permissions for an existing group or user, click the name of the group or user and then click View/Edit.
To remove a group or user and its special permissions, click the name of the group or user and then click Remove. If the Remove button is unavailable, clear the Allow inheritable permissions... check box. The file or folder will no longer inherit permissions. Skip steps 4, 5, and 6.
In the Permission Entry dialog box, click where you want the permissions applied in Apply onto, if necessary. Apply onto is available only for folders.
In Permissions, click Allow or Deny for each permission.
If you want to prevent subfolders and files within the tree from inheriting these permissions, click to select the Apply these permissions... check box.
Note

To open Windows Explorer, click Start, point to Programs, point to Accessories, and then click Windows Explorer.
You can set permissions only on drives formatted to use NTFS
To change permissions, you must be the owner or have been granted permission to do so by the owner.
Groups or users granted Full Control for a folder can delete files and subfolders within that folder regardless of the permissions protecting the files and subfolders.
If the check boxes under Permissions are shaded, the file or folder has inherited the permissions from the parent folder. For more information on how inheritance affects files and folders, see Related Topics.
To set, view, change, or remove special permissions for files and folders

Open Windows Explorer, and then locate the file or folder for which you want to set special permissions
Right-click the file or folder, click Properties, and then click the Security tab.
Click Advanced, and then do one of the following:
To set special permissions for a new group or user, click Add. In Name, type the name of the user or group using the format domainname\name. When you are finished, click OK to automatically open the Permission Entry dialog box.
To view or change special permissions for an existing group or user, click the name of the group or user and then click View/Edit.
To remove a group or user and its special permissions, click the name of the group or user and then click Remove. If the Remove button is unavailable, clear the Allow inheritable permissions... check box. The file or folder will no longer inherit permissions. Skip steps 4, 5, and 6.
In the Permission Entry dialog box, click where you want the permissions applied in Apply onto, if necessary. Apply onto is available only for folders.
In Permissions, click Allow or Deny for each permission.
If you want to prevent subfolders and files within the tree from inheriting these permissions, click to select the Apply these permissions... check box.
Note

To open Windows Explorer, click Start, point to Programs, point to Accessories, and then click Windows Explorer.
You can set permissions only on drives formatted to use NTFS
To change permissions, you must be the owner or have been granted permission to do so by the owner.
Groups or users granted Full Control for a folder can delete files and subfolders within that folder regardless of the permissions protecting the files and subfolders.
If the check boxes under Permissions are shaded, the file or folder has inherited the permissions from the parent folder. For more information on how inheritance affects files and folders, see Related Topics.

=========================================
Special Permissions
========================================
Delete Subfolders and Files

Allows or denies deleting subfolders and files, even if the Delete permission has not been granted on the subfolder or file.

Delete

Allows or denies deleting the file or folder. If you don't have Delete permission on a file or folder, you can still delete it if you have been granted Delete Subfolders and Files on the parent folder.

Collapse -

hm

by apotheon In reply to Set "special file permiss ...

Thanks for the correction.

Back to IT Employment Forum
4 total posts (Page 1 of 1)  

Related Discussions

Related Forums