RE: Restrict folder permission to prevent from moving

Dear Customer,

Thank you for posting in newsgroup. And thanks to Richard for the
contribution.

According to the description, the issue seems to be related to NTFS
permission of folders and files. If I have any misunderstanding, please
feel free to let me know.

Based on the research, here is some information just for your reference.

Analysis and Suggestion:
=====================

If you want to modify existing files and subfolders and create new files or
subfolders, the Allowed "Modify" is needed to be selected in the ACL of the
folders. However, you don't wish the users be able to move these folders to
other location, in this way, the "Modify" NTFS permission should be "Deny"
in the ACL of the folders.

Please note: If you select "Modify" permission, this will include "traverse
Folder/Execute File", "List Folder/ Read Data", "Read Attributes", "Read
Extended Attributes", "Create Files/ Write Data", "Create Folder/ Append
Data", "Write Attributes", "Write Extended Attributes", "Delete" and "Read
permission"

Since you had tried to removed "modify" out of the permission list, this
allows the user to write new files, but will not allow to modify existing
files. Yes, that is right. However, based on the test, we can even do "Save
As" because the action of "Save As" is equal to create a new file in the
folder. In other word, I am afraid that the desired wish cannot be achieved
by the current design of NTFS permission. I would like to suggest that you
check if there is a third party tool can achieve the goal.

Hope the issue will be resolved soon.

Thanks for your understanding.

David Shen
Microsoft Online Partner Support

.

Relevant Pages

  • Re: cloning /reseal process clonges the user priviliege
    ... nothing suspecious as far as NTFS permission settings. ... file BEFORE the cloning and AFTER the cloning. ... setting has been reset back to "do not show hidden files and folders" ...
    (microsoft.public.windowsxp.embedded)
  • Re: canNOT write to FTP (IIS 6)
    ... >> Bernard Cheah ... >>> else is controlled via NTFS permissions, ... >>> permissions to the folders yet can write a file to them. ... >>>> permission and then NTFS. ...
    (microsoft.public.inetserver.iis.ftp)
  • RE: Security
    ... The group has change permission on the share. ... The security on the folder has modify permissions checked. ... >> How do i stop users creating folders within a directory but at the same time ...
    (microsoft.public.win2000.active_directory)
  • Directory security for public folder.
    ... we have a new server running win2k SP2 that's part of a NT4 domain model. ... We have about 500 students that have folders in this hierarchy: ... Is there a 'batch' command that can set the modify permission for all 500 ...
    (microsoft.public.win2000.security)
  • Re: Folder Creation Rights
    ... Is it possible to allow all domain users access to all files and ... folders on a certain share, yet prevent users from create ... It is also possible to set FILE permission different from the ... DIRECTORY (NTFS) permissions. ...
    (microsoft.public.windows.server.general)