Discussion Locked

Denying Folder Deletion to Users

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I can't believe I have to ask this. My brain must be fried...anyhoo here it is...We have a Server (2K) that is our file server on our network.

The problem is when a user is accessing this folder there are a lot of subfolders and files inside andsometimes the user (not paying attention) accidentally deletes a file or moves a subfolder into another folder by mistake making it difficult for another user to find the file if he/she needs to work on it.

I need to know how to lock down this folder and ensure that A.) A user cannot delete a file or any folder (only Admins). B.) A user cannot move a file or folder into another one as well.

I have Deny (Deleting Files and Folders) option set on the folder and I know I'm missing somethingbecause when I tested it I could still delete and move. Any suggestions would be greatly appreciated due to the fact my mind has now gone to mush.

Thanks,

7 replies

by Former member

Are you logged in as admin or with admin rights? If so, you won't be able to accurately test this yourself.

by gigelul

Hi,
Of course that you can deny delete/move rights from security settings but this mean that the users can't modify/add files if you apply these restrictions at the parent folder and you allow to propagate these permissions at subfolders and files (which is the easy way). A MS Office document require delete rights if a user need to modify it.
The hard way (correct way) is to set permissions at every folder and subfolders without check box marked "allow inheritable permissions from parent to propagate to this object".
Also before setting the permissions you must use "take ownership" at parent folder level with check box marked "replace owner on subcontainers and objects". But any new folder created by a user will have this user as owner and this user will can delete or move it.
I think that you can't maintain under control these folder in this way. You must assign folder for groups, with correct permissions, you need to instruct the users, put an audit on critical folders, a good backup, a undelete software, etc.
On my file server each department have a folder (with permissions only for this group) an also exist some public folders. In this way these groups are the owners of the documents and subfolders and also are responsable for its actions. I help them when they have problems but I don't spend time with the management of this folders.

by tpccpt

Not going to work with over 3000 main folders and 14,000 subs...but thanks for the suggestion. I have a good backup and I've done a few restores when a folder was "accidently misplaced"...guess looks like I'm stuck doing that.

by mightyyoungfai

in your case why not try to limit the user access in the user setting to, like guest option? cause this type of group user has limited access like read only....feature. hope this will help.

This discussion is closed to new replies.