Re: read,modify permissions

From: Roland Hall (nobody_at_nowhere)
Date: 06/15/04 

Date: Tue, 15 Jun 2004 11:50:32 -0500

"Jill" wrote in message news:1cd3701c452db$b1e35e40$a001280a@phx.gbl...
: Hello folks....I am trying to find away to allow users to
: modify a particular folder/file but deny them the ability
: to add or remove folders from AD. We are experiencing
: some issues with this at my company. Modify allows them
: to remove folders....if I remove modify they can't get
: the access they need. Just want to prevent all user from
: adding/deleting folders and files.
:
: Any suggestions appreciated.

Several...

1. Please be specific when asking questions or making statements. "I am
trying to find away to allow users to modify a particular folder/file but
deny them the ability to add or remove folders from AD" Define: modify a
folder. "if I remove modify they can't get the access they need" is
unclear.

2. Rights assigned to a folder affect the folder and all files in the
folder. Rights assigned to a file affect that file.
3. Here you state: "Just want to prevent all user from adding/deleting
folders and files" Which means what? They can write to, modify and read
files but not delete? If they can modify the file and delete the content
and save it as a zero-byte file, that is not deleting it but that is ok?
4. You will need special permissions. Remove inherited rights and then
start with full rights, removing what you want under advanced rights for
that group. You will have to explicitly deny delete folders/files and you
need to check effective rights to see what the result will be for a
particular user. Yes, set rights for a group but check by user because if
that user is part of two groups, effective rights might be different
depending on the rights assigned to each group.

HTH... 

-- 
Roland Hall
/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/servicedesks/technet/default.asp?fr=0&sd=tech
How-to: Windows 2000 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308201
FAQ W2K/2K3 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;291382

Relevant Pages

  • Re: Publicly accessible directory?
    ... I thought I wanted to use the KDE desktop, ... you'd consider normally careful when modifying, overwriting, ... Well, obviously, I won't modify his files and he won't modify mine ... We didn't have unshared folders until ...
    (comp.os.linux.misc)
  • Re: Shared folder security tab...Windows 2003 server
    ... add and modify files, one can only execute and add ... but not delete, one can only execute, and the last one has no access. ... While this worked for local folders ... network are still showing the security tab. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: maybea silly question
    ... App Data won't work. ... custom folder with permissions specifically set. ... and delete files and folders created by ... Member of the limited "Users" groups can create, modify, delete their own ...
    (microsoft.public.vb.general.discussion)
  • Re: NTFS Permissions
    ... security settings? ... settings to files and folders within this folder. ... I Group - Security Group for access ... Group - Modify) ...
    (microsoft.public.windows.server.sbs)
  • read,modify permissions
    ... modify a particular folder/file but deny them the ability ... Modify allows them ... adding/deleting folders and files. ...
    (microsoft.public.windows.server.general)