NTFS Folder permissions riddle.

  • Thread starter Thread starter SF
  • Start date Start date
S

SF

Guest
Hello All,

Currently in our domain we have a share on out 2003 server called
workgroup.
Each department has their own folder within that share.
Within each dept folder there is a public folder and a private folder.
The public folder is readable to the entire organization and writable
by the dept members. The private is accessible to only to dept
members.

Example:
\\server\workgroup\accounting -> Domain Users -> read.
\\server\workgroup\accounting\public -> Domain Users ->read.
Accounting Group -> Modify.
\\server\workgroup\accounting\private -> Domain Users ->No perms.
Accounting Group -> Modify.

All folders are owned/created by administrator.

The problem is that since they have permissions on the folders,
members of the accounting group can rename the public and private
folders.

I want to have a folder that allows group members to add and remove
files and folders within it but not allow them to modify the folder
itself in anyway.

What am I missing?

Thanks for any advice.
 
Re: NTFS Folder permissions riddle.

Hello SF,

Open the advanced security settings, choose edit mode and her eyou can configure
the settings only for special needs, this folder only, subfolders and files
etc. Here you have to set the permissions for the level where you don't wan
t to have the changes. Create a test folder and try it out for your own needs.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hello All,
>
> Currently in our domain we have a share on out 2003 server called
> workgroup.
> Each department has their own folder within that share.
> Within each dept folder there is a public folder and a private folder.
> The public folder is readable to the entire organization and writable
> by the dept members. The private is accessible to only to dept
> members.
> Example:
> \\server\workgroup\accounting -> Domain Users -> read.
> \\server\workgroup\accounting\public -> Domain Users ->read.
> Accounting Group -> Modify.
> \\server\workgroup\accounting\private -> Domain Users ->No perms.
> Accounting Group -> Modify.
> All folders are owned/created by administrator.
>
> The problem is that since they have permissions on the folders,
> members of the accounting group can rename the public and private
> folders.
>
> I want to have a folder that allows group members to add and remove
> files and folders within it but not allow them to modify the folder
> itself in anyway.
>
> What am I missing?
>
> Thanks for any advice.
>
 
Re: NTFS Folder permissions riddle.

Modify the read/write permission for the depts on the public and private to
read and all objects of the folder and sub-folder read/write.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"SF" <solutionforge@gmail.com> wrote in message
news:0ff944b8-2dc0-4eac-a836-598dec492668@p39g2000prm.googlegroups.com...
> Hello All,
>
> Currently in our domain we have a share on out 2003 server called
> workgroup.
> Each department has their own folder within that share.
> Within each dept folder there is a public folder and a private folder.
> The public folder is readable to the entire organization and writable
> by the dept members. The private is accessible to only to dept
> members.
>
> Example:
> \\server\workgroup\accounting -> Domain Users -> read.
> \\server\workgroup\accounting\public -> Domain Users ->read.
> Accounting Group -> Modify.
> \\server\workgroup\accounting\private -> Domain Users ->No perms.
> Accounting Group -> Modify.
>
> All folders are owned/created by administrator.
>
> The problem is that since they have permissions on the folders,
> members of the accounting group can rename the public and private
> folders.
>
> I want to have a folder that allows group members to add and remove
> files and folders within it but not allow them to modify the folder
> itself in anyway.
>
> What am I missing?
>
> Thanks for any advice.
>
 
Re: NTFS Folder permissions riddle.

On Jun 30, 6:49 am, "Paul Bergson [MVP-DS]"
<pbergson@allete_nospam.com> wrote:
> Modify the read/write permission for the depts on the public and private to
> read and all objects of the folder and sub-folder read/write.
>
> --
> Paul Bergson
> MVP - Directory Services
> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup
> This posting is provided "AS IS" with no warranties, and confers no rights..
>
> "SF" <solutionfo...@gmail.com> wrote in message
>
> news:0ff944b8-2dc0-4eac-a836-598dec492668@p39g2000prm.googlegroups.com...
>
>
>
> > Hello All,
>
> > Currently in our domain we have a share on out 2003 server called
> > workgroup.
> > Each department has their own folder within that share.
> > Within each dept folder there is a public folder and a private folder.
> > The public folder is readable to the entire organization and writable
> > by the dept members. The private is accessible to only to dept
> > members.
>
> > Example:
> > \\server\workgroup\accounting -> Domain Users -> read.
> > \\server\workgroup\accounting\public  -> Domain Users ->read.
> > Accounting Group -> Modify.
> > \\server\workgroup\accounting\private -> Domain Users ->No perms.
> > Accounting Group -> Modify.
>
> > All folders are owned/created by administrator.
>
> > The problem is that since they have permissions on the folders,
> > members of the accounting group can rename the public and private
> > folders.
>
> > I want to have a folder that allows group members to add and remove
> > files and folders within it but not allow them to modify the folder
> > itself in anyway.
>
> > What am I missing?
>
> > Thanks for any advice.- Hide quoted text -
>
> - Show quoted text -

Thanks for the help guys I figured it out.

Thanks again
 
Back
Top