Re: NTFS Permissions Question
blastingfonda_at_gmail.com
Date: 02/04/05
- Next message: FrisbeeŽ: "Re: Worthless"
- Previous message: Pitralom: "Re: Training Course"
- In reply to: MikeF: "Re: NTFS Permissions Question"
- Next in thread: T-Bone: "Re: NTFS Permissions Question"
- Reply: T-Bone: "Re: NTFS Permissions Question"
- Messages sorted by: [ date ] [ thread ]
Date: 4 Feb 2005 00:45:22 -0800
MikeF wrote:
> Sorry for top post.
> Answer is, modify includes delete, but not delete subfolders and
files. If
> they have modify on the parent folder they have delete on the parent,
which
> flows thru inheritance to the subfolders and files.
>
> The purpose of the delete subfolders and files is to be applied to
specific
> subfolder(s) when delete is not inherited from the parent folder.
Thus you
> could have a parent folder to which the user's perms allow no
deletion.
> Under it you could have 5 subfolders. And under them more subs, and
so on.
> On two of the subfolders you might wish to give the user delete
subfolders
> and files. And here comes Microsoft, with just the permission you
need.
>
> The relevant info is available in Server 03 help. I copied it below,
but if
> it comes out garbled, searh on permissions, then find Permissions :
Access
> Control > Permissions For Files and Folders, then from a link on that
page,
> File and Folder Permissions.
>
> It's admittedly finicky, but it makes sense.
>
> Good luck
>
> Mike
Thanks everyone for posting - I think most comments were helpful and
very close to the mark.
As many noted, Modify causes the Delete permission to drill down when
inheritance isn't blocked. So it doesn't matter that the Delete
Subfolders and Files is unchecked. In this case, the feature is
essentially useless - it can be checked or checked and it doesn't make
a difference either way. On Full Control, it's a superfluous permission
since FC already has the Delete permission and that's being inherited
by child objects.
That's why I was confused - I thought Full Control somehow had an
ability to delete subfolders that Modify didn't. But outside of the
take ownership permission and the ability to change permissions of
child objects within the folder, Full Control = Modify.
Meanwhile, I did some fiddling on my own and I came to the same
conclusion that I see Mike posted here - the one time the Delete
Subfolders and Files permission ever comes into play is when Delete is
flipped off on the top-level folder and the Delete Subfolders and Files
is flipped on. The user is then blocked from deleting the top folder,
but can delete ALL subfolders and files, not just specific ones, Mike,
unless inheritance is blocked or explicit Denies are put into place. I
can see using this feature on Employee Folders on a company server,
where you don't really care what employees do inside their own folder
as long as they don't accidently delete the "JohnDoe" folder itself.
Thanks once again for all the help. It appears you guys aren't nearly
as "worthless" as that one poster claimed. :-)
- bf -
- Next message: FrisbeeŽ: "Re: Worthless"
- Previous message: Pitralom: "Re: Training Course"
- In reply to: MikeF: "Re: NTFS Permissions Question"
- Next in thread: T-Bone: "Re: NTFS Permissions Question"
- Reply: T-Bone: "Re: NTFS Permissions Question"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
