1 - Heed Ben's advice about avoiding "Deny" if at all possible. Much chaos can ensue.
Yeah, the last thing you want to do is get into a black-list permissions model ;) From: Andrew S. Baker [mailto:[email protected]] Sent: Monday, February 07, 2011 5:14 PM To: NT System Admin Issues Subject: Re: Windows 2008 Perms Question Two points: 1 - Heed Ben's advice about avoiding "Deny" if at all possible. Much chaos can ensue. 2 - No matter how you do this, expect to have problems with some file types. For instance, MS Office apps update files be creating new files and then deleting them. For Word, this will only leave some clutter. For Excel, you'll end up with your data in randomly named files. ASB (Find me online via About.Me<http://about.me/Andrew.S.Baker/bio>) Exploiting Technology for Business Advantage... On Mon, Feb 7, 2011 at 4:42 PM, Tom Miller <[email protected]<mailto:[email protected]>> wrote: Folks, I need to modify the perms on a folder under a share. Staff need to have the ability to create files only, modify them, but not delete them once they are created, and not delete the subfolder itself. I am trying this by granting perms to traverse "this folder only", then perms to create files in "this folder and files". Good enough, but I can't get the deny correct. "This folder, subfolders, and files" prevents from creating new files, "this folder and files" won't work either. FYI I removed inheritable rights and started from there. Suggestions appreciated. Tom ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
