Ntfs delete folder permissions

jas0n · External Since: Mar 07, 2007 Posts: 2

Is it possible using ntfs permissions to stop a folder and its contents
from being deleted from someone who would have change permissions to the
folder/subfolders/files?

If I set it so the folder cant be deleted it works for the folder, I get
the denied msg but it deletes the contents of the folder before it gets
to this.

This is on a w2k/2003 domain, a share where there is 30 top level
folders with a lot of information stoerd in each folder - all users who
have access to each folder have modify permissions.

Maike13 · Joined: Apr 18, 2007 Posts: 3

Did you ever find an answer to this. I'm having the same problem and came across your enquiry while searching for a solution.

thanks,
Mike

jas0n wrote:

Is it possible using ntfs permissions to stop a folder and its contents
from being deleted from someone who would have change permissions to the
folder/subfolders/files?

If I set it so the folder cant be deleted it works for the folder, I get
the denied msg but it deletes the contents of the folder before it gets
to this.

This is on a w2k/2003 domain, a share where there is 30 top level
folders with a lot of information stoerd in each folder - all users who
have access to each folder have modify permissions.

Maike13 · Joined: Apr 18, 2007 Posts: 3

Never mind. I played around with the permissions and think I found an answer. If you're still having problems try this. It seems to be working for me.

I have a folder c:\Test 1.1
Inside that is a folder c:\Test 1.1\Test 2.1
Lets suppose I'm trying to control access for Power Users

On folder c:\Test 1.1, I give Power Users Change rights.
Then I click Advanced, click on the Power Users entry and click Edit.
I then check the Deny check boxes for Delete Subfolders and Files, and Delete. Leave all other check boxes alone.
Then under "Apply onto" I select "This folder only" and click OK
This creates a second entry for Power Users with just the two Deny check boxes checked.

On folder c:\Test 1.1\Test 2.1, I do exactly the same except only check the Delete check box and NOT the Delete Subfolders and Files check box. Then once the two entries are there, go back to the Allow entry for Power Users and re-check the Allow check box for Delete and select This folder, subfolders and files for "Apply onto". This restores the entry to a full Modify and is the entry that will be inherited by folders and files created in or added to c:\Test 1.1\Test 2.1. Otherwise these files and folders will not have the delete permission.

Now, Power Users can modify any files and folders in c:\Test 1.1\Test 2.1 and any files and folders created in c:\Test 1.1\Test 2.1 inherit normal Change rights for the Power Users group. If you try to delete c:\Test 1.1\Test 2.1 it will not let you, nor will it delete any of the contents.

Hope this is of some help.

Mike

Maike13 · Joined: Apr 18, 2007 Posts: 3

Oops. Spoke too soon. I set up a test user account to use while experimenting with the permissions and the above method works perfectly for that account but ONLY that account. It doesn't work for any other user account I try. Very odd. Now if I can just figure out what's different about the user account that works Smile

Mike

nikruskram · Joined: Apr 01, 2008 Posts: 1

Did you ever figure out how to get this working?? I'm having the same issue...