Software

Ask something
Question Locked

Permissions on Windows

0 helpful
5 replies

by countyworker01

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I need to find a way to setup permissions on a folder to allow users to do the following:

- List all folders and files
- Create folders and files
- Not able to delete or modify anything that is in the folder (even folders or files that they created or moved over into this location)

I basically need this folder to be a dumping repository that would allow users to dump their folders and files in to. Once they're in there, they won't be able to modify or delete anything. Can this be accomplished?

5 replies

by nimmo

Take a look at the NTFS security permissions in the advanced secion.

If your not sure do a right click on the folder, select the security tab and down the bottom of the security menu is an advanced button.

When the advanced options window opens select appropiate user/group and click edit.

One thing to be careful about is inheritance from parent and also inheritance been propergated to subfolders and files.

by countyworker01

I understand how to set permissions. I just don't know how to setup the kind of permissions that I need.

Anyone else have any insight on this?

by darryl~

I'm not sure if I totally understand what you're trying to do.

I just gave this a try to see if it would do what you want. I set it up on a Windows 2003 Server...I'm not sure what you're using.

I made a folder on the root of C (don't think it really matters where you make it) & clicked the advanced security settings....I removed all inheritable permissions & auditing....I made my account the owner & gave it full control...I created another account & made it a "user" & member of the "Remote Desktop Group"...I gave this account everything EXCEPT "Full Control" & "Modify".

I logged in remotely and was able to copy files & folders to the one on the server but was not able to delete them. I could create new folders in the one on the server but not detete it. I COULD NOT open Word & save a new file to the folder....I had to save it to the desktop & copy it over to the "special" folder on the server. My account, which I gave full permissions to, could create, delete, copy.

Is that what you're trying to do?

by countyworker01

That doesn't seem to do what I want it to do. If I set it up that way, the person that creates the file and drags it into the "dump folder" can do anything with it because they're the owner.

Initially, they won't be able to delete it, but they can easily go into the permissions of the file, change them, and then delete it.

I need to find a way to automatically reset the owner of the file as soon as the file is dumped into the folder. If I could do that, it would solve the issue.

This discussion is closed to new replies.