Sign in with
Sign up | Sign in
Your question

Folder Permissions - delete

Last response: in Windows 2000/NT
Share
Anonymous
July 12, 2004 3:10:34 PM

Archived from groups: microsoft.public.win2000.security (More info?)

Hello,

I have a share on a data server that is the lump of my document
management software... in this share, there are just folder upon subfolder
upon subfolder of word documents and excel ect. ect.

at the top of the share i have permisssions set so that the admin has
rights to do anything but delete, and domain users have full rights to
modify... i aslo have another 'super' admin that is designated as the only
group that had delete rights.

i have propogate checked on the permissions, so that the same
permissions as set on the share will trickle down to the subfolders... this
does not seem to be the case first i don't see any permissions carry down...
and second, i'm wondering if the advanced permissions (delete) option is
acutally going to work against deleting files as opposed to folders.

please give me any advice or consulation on my current plan. thanks.
Anonymous
July 12, 2004 9:06:00 PM

Archived from groups: microsoft.public.win2000.security (More info?)

For one thing "modify" permissions will allow a user to delete a file. You may also
want to look at using the fileacl utility to change permissions [which can also do
advanced permissions] and force inheritance if the Explorer gui does not seem to be
working right. Be sure to have a full backup before you start in case things go wrong
though with fileacl an administrator always should be able to change
ermissions. --- Steve

http://www.microsoft.com/downloads/details.aspx?FamilyI...

"pittspeed" <turbovw18@hotmail.com> wrote in message
news:uHBdiJCaEHA.2892@TK2MSFTNGP10.phx.gbl...
> Hello,
>
> I have a share on a data server that is the lump of my document
> management software... in this share, there are just folder upon subfolder
> upon subfolder of word documents and excel ect. ect.
>
> at the top of the share i have permisssions set so that the admin has
> rights to do anything but delete, and domain users have full rights to
> modify... i aslo have another 'super' admin that is designated as the only
> group that had delete rights.
>
> i have propogate checked on the permissions, so that the same
> permissions as set on the share will trickle down to the subfolders... this
> does not seem to be the case first i don't see any permissions carry down...
> and second, i'm wondering if the advanced permissions (delete) option is
> acutally going to work against deleting files as opposed to folders.
>
> please give me any advice or consulation on my current plan. thanks.
>
>
Anonymous
July 12, 2004 9:06:01 PM

Archived from groups: microsoft.public.win2000.security (More info?)

thansk... i'm making myself and the two higher level admins the actual
admins to delete files... i'm keeping the techs out of the delete permission
incase somone does a search and wipes out some docs by accident.

i've found that my permissions were copying down... but i was getting a
problem with creation of new docs... the users did not have permissions to
create new docs when i took away delete and take ownership...

it seems that if i just take away delete and leave modify in the regular
permissions (not in the advanced tab) the user can still delete...

so i'm wondering how i can make it so that domain users cannot delete, but
can create new docs...
"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
news:YxzIc.61991$MB3.24766@attbi_s04...
> For one thing "modify" permissions will allow a user to delete a file. You
may also
> want to look at using the fileacl utility to change permissions [which can
also do
> advanced permissions] and force inheritance if the Explorer gui does not
seem to be
> working right. Be sure to have a full backup before you start in case
things go wrong
> though with fileacl an administrator always should be able to change
> ermissions. --- Steve
>
>
http://www.microsoft.com/downloads/details.aspx?FamilyI...
>
> "pittspeed" <turbovw18@hotmail.com> wrote in message
> news:uHBdiJCaEHA.2892@TK2MSFTNGP10.phx.gbl...
> > Hello,
> >
> > I have a share on a data server that is the lump of my document
> > management software... in this share, there are just folder upon
subfolder
> > upon subfolder of word documents and excel ect. ect.
> >
> > at the top of the share i have permisssions set so that the admin
has
> > rights to do anything but delete, and domain users have full rights to
> > modify... i aslo have another 'super' admin that is designated as the
only
> > group that had delete rights.
> >
> > i have propogate checked on the permissions, so that the same
> > permissions as set on the share will trickle down to the subfolders...
this
> > does not seem to be the case first i don't see any permissions carry
down...
> > and second, i'm wondering if the advanced permissions (delete) option is
> > acutally going to work against deleting files as opposed to folders.
> >
> > please give me any advice or consulation on my current plan. thanks.
> >
> >
>
>
Related resources
Anonymous
July 12, 2004 10:06:29 PM

Archived from groups: microsoft.public.win2000.security (More info?)

Yes, modify will allow a user to delete files. Try giving then just
read/list/execute/write permissions to the folder. That should allow then to write
files to the folder, but not delete them unless the creator owner is present and has
full/modify permissions. The creator owner causes users to receive permissions
assigned to it when a user writes a file and is based on ownership. -- Steve


"pittspeed" <turbovw18@hotmail.com> wrote in message
news:o hm2TnDaEHA.3244@TK2MSFTNGP12.phx.gbl...
> thansk... i'm making myself and the two higher level admins the actual
> admins to delete files... i'm keeping the techs out of the delete permission
> incase somone does a search and wipes out some docs by accident.
>
> i've found that my permissions were copying down... but i was getting a
> problem with creation of new docs... the users did not have permissions to
> create new docs when i took away delete and take ownership...
>
> it seems that if i just take away delete and leave modify in the regular
> permissions (not in the advanced tab) the user can still delete...
>
> so i'm wondering how i can make it so that domain users cannot delete, but
> can create new docs...
> "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
> news:YxzIc.61991$MB3.24766@attbi_s04...
> > For one thing "modify" permissions will allow a user to delete a file. You
> may also
> > want to look at using the fileacl utility to change permissions [which can
> also do
> > advanced permissions] and force inheritance if the Explorer gui does not
> seem to be
> > working right. Be sure to have a full backup before you start in case
> things go wrong
> > though with fileacl an administrator always should be able to change
> > ermissions. --- Steve
> >
> >
>
http://www.microsoft.com/downloads/details.aspx?FamilyI...
> >
> > "pittspeed" <turbovw18@hotmail.com> wrote in message
> > news:uHBdiJCaEHA.2892@TK2MSFTNGP10.phx.gbl...
> > > Hello,
> > >
> > > I have a share on a data server that is the lump of my document
> > > management software... in this share, there are just folder upon
> subfolder
> > > upon subfolder of word documents and excel ect. ect.
> > >
> > > at the top of the share i have permisssions set so that the admin
> has
> > > rights to do anything but delete, and domain users have full rights to
> > > modify... i aslo have another 'super' admin that is designated as the
> only
> > > group that had delete rights.
> > >
> > > i have propogate checked on the permissions, so that the same
> > > permissions as set on the share will trickle down to the subfolders...
> this
> > > does not seem to be the case first i don't see any permissions carry
> down...
> > > and second, i'm wondering if the advanced permissions (delete) option is
> > > acutally going to work against deleting files as opposed to folders.
> > >
> > > please give me any advice or consulation on my current plan. thanks.
> > >
> > >
> >
> >
>
>
Anonymous
July 12, 2004 10:06:30 PM

Archived from groups: microsoft.public.win2000.security (More info?)

so for good practice the creator owner should be the 'super admin' group i
made, or just the domain\administrator account?

thanks for the help Steven


"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
news:EqAIc.59163$JR4.41698@attbi_s54...
> Yes, modify will allow a user to delete files. Try giving then just
> read/list/execute/write permissions to the folder. That should allow then
to write
> files to the folder, but not delete them unless the creator owner is
present and has
> full/modify permissions. The creator owner causes users to receive
permissions
> assigned to it when a user writes a file and is based on ownership. --
Steve
>
>
> "pittspeed" <turbovw18@hotmail.com> wrote in message
> news:o hm2TnDaEHA.3244@TK2MSFTNGP12.phx.gbl...
> > thansk... i'm making myself and the two higher level admins the actual
> > admins to delete files... i'm keeping the techs out of the delete
permission
> > incase somone does a search and wipes out some docs by accident.
> >
> > i've found that my permissions were copying down... but i was getting a
> > problem with creation of new docs... the users did not have permissions
to
> > create new docs when i took away delete and take ownership...
> >
> > it seems that if i just take away delete and leave modify in the regular
> > permissions (not in the advanced tab) the user can still delete...
> >
> > so i'm wondering how i can make it so that domain users cannot delete,
but
> > can create new docs...
> > "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
> > news:YxzIc.61991$MB3.24766@attbi_s04...
> > > For one thing "modify" permissions will allow a user to delete a file.
You
> > may also
> > > want to look at using the fileacl utility to change permissions [which
can
> > also do
> > > advanced permissions] and force inheritance if the Explorer gui does
not
> > seem to be
> > > working right. Be sure to have a full backup before you start in case
> > things go wrong
> > > though with fileacl an administrator always should be able to change
> > > ermissions. --- Steve
> > >
> > >
> >
>
http://www.microsoft.com/downloads/details.aspx?FamilyI...
> > >
> > > "pittspeed" <turbovw18@hotmail.com> wrote in message
> > > news:uHBdiJCaEHA.2892@TK2MSFTNGP10.phx.gbl...
> > > > Hello,
> > > >
> > > > I have a share on a data server that is the lump of my document
> > > > management software... in this share, there are just folder upon
> > subfolder
> > > > upon subfolder of word documents and excel ect. ect.
> > > >
> > > > at the top of the share i have permisssions set so that the
admin
> > has
> > > > rights to do anything but delete, and domain users have full rights
to
> > > > modify... i aslo have another 'super' admin that is designated as
the
> > only
> > > > group that had delete rights.
> > > >
> > > > i have propogate checked on the permissions, so that the same
> > > > permissions as set on the share will trickle down to the
subfolders...
> > this
> > > > does not seem to be the case first i don't see any permissions carry
> > down...
> > > > and second, i'm wondering if the advanced permissions (delete)
option is
> > > > acutally going to work against deleting files as opposed to folders.
> > > >
> > > > please give me any advice or consulation on my current plan.
thanks.
> > > >
> > > >
> > >
> > >
> >
> >
>
>
Anonymous
July 12, 2004 11:03:22 PM

Archived from groups: microsoft.public.win2000.security (More info?)

No. The creator owner simply allows the person who creates a file to have higher
permissions than would otherwise be assigned to that user based on their group
membership. You domain administrators are always the top dog. --- Steve

"pittspeed" <turbovw18@hotmail.com> wrote in message
news:o T7idAEaEHA.2388@TK2MSFTNGP11.phx.gbl...
> so for good practice the creator owner should be the 'super admin' group i
> made, or just the domain\administrator account?
>
> thanks for the help Steven
>
>
> "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
> news:EqAIc.59163$JR4.41698@attbi_s54...
> > Yes, modify will allow a user to delete files. Try giving then just
> > read/list/execute/write permissions to the folder. That should allow then
> to write
> > files to the folder, but not delete them unless the creator owner is
> present and has
> > full/modify permissions. The creator owner causes users to receive
> permissions
> > assigned to it when a user writes a file and is based on ownership. --
> Steve
> >
> >
> > "pittspeed" <turbovw18@hotmail.com> wrote in message
> > news:o hm2TnDaEHA.3244@TK2MSFTNGP12.phx.gbl...
> > > thansk... i'm making myself and the two higher level admins the actual
> > > admins to delete files... i'm keeping the techs out of the delete
> permission
> > > incase somone does a search and wipes out some docs by accident.
> > >
> > > i've found that my permissions were copying down... but i was getting a
> > > problem with creation of new docs... the users did not have permissions
> to
> > > create new docs when i took away delete and take ownership...
> > >
> > > it seems that if i just take away delete and leave modify in the regular
> > > permissions (not in the advanced tab) the user can still delete...
> > >
> > > so i'm wondering how i can make it so that domain users cannot delete,
> but
> > > can create new docs...
> > > "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
> > > news:YxzIc.61991$MB3.24766@attbi_s04...
> > > > For one thing "modify" permissions will allow a user to delete a file.
> You
> > > may also
> > > > want to look at using the fileacl utility to change permissions [which
> can
> > > also do
> > > > advanced permissions] and force inheritance if the Explorer gui does
> not
> > > seem to be
> > > > working right. Be sure to have a full backup before you start in case
> > > things go wrong
> > > > though with fileacl an administrator always should be able to change
> > > > ermissions. --- Steve
> > > >
> > > >
> > >
> >
>
http://www.microsoft.com/downloads/details.aspx?FamilyI...
> > > >
> > > > "pittspeed" <turbovw18@hotmail.com> wrote in message
> > > > news:uHBdiJCaEHA.2892@TK2MSFTNGP10.phx.gbl...
> > > > > Hello,
> > > > >
> > > > > I have a share on a data server that is the lump of my document
> > > > > management software... in this share, there are just folder upon
> > > subfolder
> > > > > upon subfolder of word documents and excel ect. ect.
> > > > >
> > > > > at the top of the share i have permisssions set so that the
> admin
> > > has
> > > > > rights to do anything but delete, and domain users have full rights
> to
> > > > > modify... i aslo have another 'super' admin that is designated as
> the
> > > only
> > > > > group that had delete rights.
> > > > >
> > > > > i have propogate checked on the permissions, so that the same
> > > > > permissions as set on the share will trickle down to the
> subfolders...
> > > this
> > > > > does not seem to be the case first i don't see any permissions carry
> > > down...
> > > > > and second, i'm wondering if the advanced permissions (delete)
> option is
> > > > > acutally going to work against deleting files as opposed to folders.
> > > > >
> > > > > please give me any advice or consulation on my current plan.
> thanks.
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>
Anonymous
July 13, 2004 2:23:56 PM

Archived from groups: microsoft.public.win2000.security (More info?)

once i set up all the permissions and the deny rule for delete and delete
subfolders... i'm still getting an error about permissions and not being
able to be saved... i'm wondering if the ownership is messed up and is
causing my domain users to NOT be able to save... the ownership tab as the
local admin and the network administrator accounts attached.

any ideas on why i'm running into issues... basically i want my users to
have modify rights MINUS the delete options... but it doesn't seem to work
for me...


"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
news:_fBIc.75909$Oq2.38668@attbi_s52...
> No. The creator owner simply allows the person who creates a file to have
higher
> permissions than would otherwise be assigned to that user based on their
group
> membership. You domain administrators are always the top dog. --- Steve
>
> "pittspeed" <turbovw18@hotmail.com> wrote in message
> news:o T7idAEaEHA.2388@TK2MSFTNGP11.phx.gbl...
> > so for good practice the creator owner should be the 'super admin' group
i
> > made, or just the domain\administrator account?
> >
> > thanks for the help Steven
> >
> >
> > "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
> > news:EqAIc.59163$JR4.41698@attbi_s54...
> > > Yes, modify will allow a user to delete files. Try giving then just
> > > read/list/execute/write permissions to the folder. That should allow
then
> > to write
> > > files to the folder, but not delete them unless the creator owner is
> > present and has
> > > full/modify permissions. The creator owner causes users to receive
> > permissions
> > > assigned to it when a user writes a file and is based on
wnership. --
> > Steve
> > >
> > >
> > > "pittspeed" <turbovw18@hotmail.com> wrote in message
> > > news:o hm2TnDaEHA.3244@TK2MSFTNGP12.phx.gbl...
> > > > thansk... i'm making myself and the two higher level admins the
actual
> > > > admins to delete files... i'm keeping the techs out of the delete
> > permission
> > > > incase somone does a search and wipes out some docs by accident.
> > > >
> > > > i've found that my permissions were copying down... but i was
getting a
> > > > problem with creation of new docs... the users did not have
permissions
> > to
> > > > create new docs when i took away delete and take ownership...
> > > >
> > > > it seems that if i just take away delete and leave modify in the
regular
> > > > permissions (not in the advanced tab) the user can still delete...
> > > >
> > > > so i'm wondering how i can make it so that domain users cannot
delete,
> > but
> > > > can create new docs...
> > > > "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in
message
> > > > news:YxzIc.61991$MB3.24766@attbi_s04...
> > > > > For one thing "modify" permissions will allow a user to delete a
file.
> > You
> > > > may also
> > > > > want to look at using the fileacl utility to change permissions
[which
> > can
> > > > also do
> > > > > advanced permissions] and force inheritance if the Explorer gui
does
> > not
> > > > seem to be
> > > > > working right. Be sure to have a full backup before you start in
case
> > > > things go wrong
> > > > > though with fileacl an administrator always should be able to
change
> > > > > ermissions. --- Steve
> > > > >
> > > > >
> > > >
> > >
> >
>
http://www.microsoft.com/downloads/details.aspx?FamilyI...
> > > > >
> > > > > "pittspeed" <turbovw18@hotmail.com> wrote in message
> > > > > news:uHBdiJCaEHA.2892@TK2MSFTNGP10.phx.gbl...
> > > > > > Hello,
> > > > > >
> > > > > > I have a share on a data server that is the lump of my
document
> > > > > > management software... in this share, there are just folder upon
> > > > subfolder
> > > > > > upon subfolder of word documents and excel ect. ect.
> > > > > >
> > > > > > at the top of the share i have permisssions set so that the
> > admin
> > > > has
> > > > > > rights to do anything but delete, and domain users have full
rights
> > to
> > > > > > modify... i aslo have another 'super' admin that is designated
as
> > the
> > > > only
> > > > > > group that had delete rights.
> > > > > >
> > > > > > i have propogate checked on the permissions, so that the
same
> > > > > > permissions as set on the share will trickle down to the
> > subfolders...
> > > > this
> > > > > > does not seem to be the case first i don't see any permissions
carry
> > > > down...
> > > > > > and second, i'm wondering if the advanced permissions (delete)
> > option is
> > > > > > acutally going to work against deleting files as opposed to
folders.
> > > > > >
> > > > > > please give me any advice or consulation on my current plan.
> > thanks.
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>
Anonymous
July 13, 2004 8:54:14 PM

Archived from groups: microsoft.public.win2000.security (More info?)

I think you are trying to do the impossible. Modify without delete permissions is the
same as write permissions which is not good enough to modify files in many cases.
Owner ship has nothing to do with the ability to save or delete files. The owner can
change permissions. --- Steve


"pittspeed" <turbovw18@hotmail.com> wrote in message
news:eGlQJUOaEHA.2812@TK2MSFTNGP11.phx.gbl...
> once i set up all the permissions and the deny rule for delete and delete
> subfolders... i'm still getting an error about permissions and not being
> able to be saved... i'm wondering if the ownership is messed up and is
> causing my domain users to NOT be able to save... the ownership tab as the
> local admin and the network administrator accounts attached.
>
> any ideas on why i'm running into issues... basically i want my users to
> have modify rights MINUS the delete options... but it doesn't seem to work
> for me...
>
>
> "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
> news:_fBIc.75909$Oq2.38668@attbi_s52...
> > No. The creator owner simply allows the person who creates a file to have
> higher
> > permissions than would otherwise be assigned to that user based on their
> group
> > membership. You domain administrators are always the top dog. --- Steve
> >
> > "pittspeed" <turbovw18@hotmail.com> wrote in message
> > news:o T7idAEaEHA.2388@TK2MSFTNGP11.phx.gbl...
> > > so for good practice the creator owner should be the 'super admin' group
> i
> > > made, or just the domain\administrator account?
> > >
> > > thanks for the help Steven
> > >
> > >
> > > "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
> > > news:EqAIc.59163$JR4.41698@attbi_s54...
> > > > Yes, modify will allow a user to delete files. Try giving then just
> > > > read/list/execute/write permissions to the folder. That should allow
> then
> > > to write
> > > > files to the folder, but not delete them unless the creator owner is
> > > present and has
> > > > full/modify permissions. The creator owner causes users to receive
> > > permissions
> > > > assigned to it when a user writes a file and is based on
> wnership. --
> > > Steve
> > > >
> > > >
> > > > "pittspeed" <turbovw18@hotmail.com> wrote in message
> > > > news:o hm2TnDaEHA.3244@TK2MSFTNGP12.phx.gbl...
> > > > > thansk... i'm making myself and the two higher level admins the
> actual
> > > > > admins to delete files... i'm keeping the techs out of the delete
> > > permission
> > > > > incase somone does a search and wipes out some docs by accident.
> > > > >
> > > > > i've found that my permissions were copying down... but i was
> getting a
> > > > > problem with creation of new docs... the users did not have
> permissions
> > > to
> > > > > create new docs when i took away delete and take ownership...
> > > > >
> > > > > it seems that if i just take away delete and leave modify in the
> regular
> > > > > permissions (not in the advanced tab) the user can still delete...
> > > > >
> > > > > so i'm wondering how i can make it so that domain users cannot
> delete,
> > > but
> > > > > can create new docs...
> > > > > "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in
> message
> > > > > news:YxzIc.61991$MB3.24766@attbi_s04...
> > > > > > For one thing "modify" permissions will allow a user to delete a
> file.
> > > You
> > > > > may also
> > > > > > want to look at using the fileacl utility to change permissions
> [which
> > > can
> > > > > also do
> > > > > > advanced permissions] and force inheritance if the Explorer gui
> does
> > > not
> > > > > seem to be
> > > > > > working right. Be sure to have a full backup before you start in
> case
> > > > > things go wrong
> > > > > > though with fileacl an administrator always should be able to
> change
> > > > > > ermissions. --- Steve
> > > > > >
> > > > > >
> > > > >
> > > >
> > >
> >
>
http://www.microsoft.com/downloads/details.aspx?FamilyI...
> > > > > >
> > > > > > "pittspeed" <turbovw18@hotmail.com> wrote in message
> > > > > > news:uHBdiJCaEHA.2892@TK2MSFTNGP10.phx.gbl...
> > > > > > > Hello,
> > > > > > >
> > > > > > > I have a share on a data server that is the lump of my
> document
> > > > > > > management software... in this share, there are just folder upon
> > > > > subfolder
> > > > > > > upon subfolder of word documents and excel ect. ect.
> > > > > > >
> > > > > > > at the top of the share i have permisssions set so that the
> > > admin
> > > > > has
> > > > > > > rights to do anything but delete, and domain users have full
> rights
> > > to
> > > > > > > modify... i aslo have another 'super' admin that is designated
> as
> > > the
> > > > > only
> > > > > > > group that had delete rights.
> > > > > > >
> > > > > > > i have propogate checked on the permissions, so that the
> same
> > > > > > > permissions as set on the share will trickle down to the
> > > subfolders...
> > > > > this
> > > > > > > does not seem to be the case first i don't see any permissions
> carry
> > > > > down...
> > > > > > > and second, i'm wondering if the advanced permissions (delete)
> > > option is
> > > > > > > acutally going to work against deleting files as opposed to
> folders.
> > > > > > >
> > > > > > > please give me any advice or consulation on my current plan.
> > > thanks.
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>
Anonymous
July 13, 2004 8:54:15 PM

Archived from groups: microsoft.public.win2000.security (More info?)

ok... i was just making sure that the 'requirement' for our file system is
unattainable... from the one post from you i thought it was possible... i
*thought that modify is basically write permission which in turn is
essentially delete permission... which is impossible to avoid.

Thanks for the help steven.


"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
news:WsUIc.69243$%_6.2970@attbi_s01...
> I think you are trying to do the impossible. Modify without delete
permissions is the
> same as write permissions which is not good enough to modify files in many
cases.
> Owner ship has nothing to do with the ability to save or delete files. The
owner can
> change permissions. --- Steve
>
>
> "pittspeed" <turbovw18@hotmail.com> wrote in message
> news:eGlQJUOaEHA.2812@TK2MSFTNGP11.phx.gbl...
> > once i set up all the permissions and the deny rule for delete and
delete
> > subfolders... i'm still getting an error about permissions and not being
> > able to be saved... i'm wondering if the ownership is messed up and is
> > causing my domain users to NOT be able to save... the ownership tab as
the
> > local admin and the network administrator accounts attached.
> >
> > any ideas on why i'm running into issues... basically i want my users to
> > have modify rights MINUS the delete options... but it doesn't seem to
work
> > for me...
> >
> >
> > "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
> > news:_fBIc.75909$Oq2.38668@attbi_s52...
> > > No. The creator owner simply allows the person who creates a file to
have
> > higher
> > > permissions than would otherwise be assigned to that user based on
their
> > group
> > > membership. You domain administrators are always the top dog. ---
Steve
> > >
> > > "pittspeed" <turbovw18@hotmail.com> wrote in message
> > > news:o T7idAEaEHA.2388@TK2MSFTNGP11.phx.gbl...
> > > > so for good practice the creator owner should be the 'super admin'
group
> > i
> > > > made, or just the domain\administrator account?
> > > >
> > > > thanks for the help Steven
> > > >
> > > >
> > > > "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in
message
> > > > news:EqAIc.59163$JR4.41698@attbi_s54...
> > > > > Yes, modify will allow a user to delete files. Try giving then
just
> > > > > read/list/execute/write permissions to the folder. That should
allow
> > then
> > > > to write
> > > > > files to the folder, but not delete them unless the creator owner
is
> > > > present and has
> > > > > full/modify permissions. The creator owner causes users to receive
> > > > permissions
> > > > > assigned to it when a user writes a file and is based on
> > wnership. --
> > > > Steve
> > > > >
> > > > >
> > > > > "pittspeed" <turbovw18@hotmail.com> wrote in message
> > > > > news:o hm2TnDaEHA.3244@TK2MSFTNGP12.phx.gbl...
> > > > > > thansk... i'm making myself and the two higher level admins the
> > actual
> > > > > > admins to delete files... i'm keeping the techs out of the
delete
> > > > permission
> > > > > > incase somone does a search and wipes out some docs by accident.
> > > > > >
> > > > > > i've found that my permissions were copying down... but i was
> > getting a
> > > > > > problem with creation of new docs... the users did not have
> > permissions
> > > > to
> > > > > > create new docs when i took away delete and take ownership...
> > > > > >
> > > > > > it seems that if i just take away delete and leave modify in the
> > regular
> > > > > > permissions (not in the advanced tab) the user can still
delete...
> > > > > >
> > > > > > so i'm wondering how i can make it so that domain users cannot
> > delete,
> > > > but
> > > > > > can create new docs...
> > > > > > "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in
> > message
> > > > > > news:YxzIc.61991$MB3.24766@attbi_s04...
> > > > > > > For one thing "modify" permissions will allow a user to delete
a
> > file.
> > > > You
> > > > > > may also
> > > > > > > want to look at using the fileacl utility to change
permissions
> > [which
> > > > can
> > > > > > also do
> > > > > > > advanced permissions] and force inheritance if the Explorer
gui
> > does
> > > > not
> > > > > > seem to be
> > > > > > > working right. Be sure to have a full backup before you start
in
> > case
> > > > > > things go wrong
> > > > > > > though with fileacl an administrator always should be able to
> > change
> > > > > > > ermissions. --- Steve
> > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > >
> > >
> >
>
http://www.microsoft.com/downloads/details.aspx?FamilyI...
> > > > > > >
> > > > > > > "pittspeed" <turbovw18@hotmail.com> wrote in message
> > > > > > > news:uHBdiJCaEHA.2892@TK2MSFTNGP10.phx.gbl...
> > > > > > > > Hello,
> > > > > > > >
> > > > > > > > I have a share on a data server that is the lump of my
> > document
> > > > > > > > management software... in this share, there are just folder
upon
> > > > > > subfolder
> > > > > > > > upon subfolder of word documents and excel ect. ect.
> > > > > > > >
> > > > > > > > at the top of the share i have permisssions set so that
the
> > > > admin
> > > > > > has
> > > > > > > > rights to do anything but delete, and domain users have full
> > rights
> > > > to
> > > > > > > > modify... i aslo have another 'super' admin that is
designated
> > as
> > > > the
> > > > > > only
> > > > > > > > group that had delete rights.
> > > > > > > >
> > > > > > > > i have propogate checked on the permissions, so that the
> > same
> > > > > > > > permissions as set on the share will trickle down to the
> > > > subfolders...
> > > > > > this
> > > > > > > > does not seem to be the case first i don't see any
permissions
> > carry
> > > > > > down...
> > > > > > > > and second, i'm wondering if the advanced permissions
(delete)
> > > > option is
> > > > > > > > acutally going to work against deleting files as opposed to
> > folders.
> > > > > > > >
> > > > > > > > please give me any advice or consulation on my current plan.
> > > > thanks.
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>
!