Guest SF Posted June 29, 2008 Posted June 29, 2008 Hello All, Currently in our domain we have a share on out 2003 server called workgroup. Each department has their own folder within that share. Within each dept folder there is a public folder and a private folder. The public folder is readable to the entire organization and writable by the dept members. The private is accessible to only to dept members. Example: \\server\workgroup\accounting -> Domain Users -> read. \\server\workgroup\accounting\public -> Domain Users ->read. Accounting Group -> Modify. \\server\workgroup\accounting\private -> Domain Users ->No perms. Accounting Group -> Modify. All folders are owned/created by administrator. The problem is that since they have permissions on the folders, members of the accounting group can rename the public and private folders. I want to have a folder that allows group members to add and remove files and folders within it but not allow them to modify the folder itself in anyway. What am I missing? Thanks for any advice.
Guest Meinolf Weber Posted June 29, 2008 Posted June 29, 2008 Re: NTFS Folder permissions riddle. Hello SF, Open the advanced security settings, choose edit mode and her eyou can configure the settings only for special needs, this folder only, subfolders and files etc. Here you have to set the permissions for the level where you don't wan t to have the changes. Create a test folder and try it out for your own needs. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > Hello All, > > Currently in our domain we have a share on out 2003 server called > workgroup. > Each department has their own folder within that share. > Within each dept folder there is a public folder and a private folder. > The public folder is readable to the entire organization and writable > by the dept members. The private is accessible to only to dept > members. > Example: > \\server\workgroup\accounting -> Domain Users -> read. > \\server\workgroup\accounting\public -> Domain Users ->read. > Accounting Group -> Modify. > \\server\workgroup\accounting\private -> Domain Users ->No perms. > Accounting Group -> Modify. > All folders are owned/created by administrator. > > The problem is that since they have permissions on the folders, > members of the accounting group can rename the public and private > folders. > > I want to have a folder that allows group members to add and remove > files and folders within it but not allow them to modify the folder > itself in anyway. > > What am I missing? > > Thanks for any advice. >
Guest Paul Bergson [MVP-DS] Posted June 30, 2008 Posted June 30, 2008 Re: NTFS Folder permissions riddle. Modify the read/write permission for the depts on the public and private to read and all objects of the folder and sub-folder read/write. -- Paul Bergson MVP - Directory Services MCTS, MCT, MCSE, MCSA, Security+, BS CSci 2008, 2003, 2000 (Early Achiever), NT4 http://www.pbbergs.com Please no e-mails, any questions should be posted in the NewsGroup This posting is provided "AS IS" with no warranties, and confers no rights. "SF" <solutionforge@gmail.com> wrote in message news:0ff944b8-2dc0-4eac-a836-598dec492668@p39g2000prm.googlegroups.com... > Hello All, > > Currently in our domain we have a share on out 2003 server called > workgroup. > Each department has their own folder within that share. > Within each dept folder there is a public folder and a private folder. > The public folder is readable to the entire organization and writable > by the dept members. The private is accessible to only to dept > members. > > Example: > \\server\workgroup\accounting -> Domain Users -> read. > \\server\workgroup\accounting\public -> Domain Users ->read. > Accounting Group -> Modify. > \\server\workgroup\accounting\private -> Domain Users ->No perms. > Accounting Group -> Modify. > > All folders are owned/created by administrator. > > The problem is that since they have permissions on the folders, > members of the accounting group can rename the public and private > folders. > > I want to have a folder that allows group members to add and remove > files and folders within it but not allow them to modify the folder > itself in anyway. > > What am I missing? > > Thanks for any advice. >
Guest SF Posted June 30, 2008 Posted June 30, 2008 Re: NTFS Folder permissions riddle. On Jun 30, 6:49 am, "Paul Bergson [MVP-DS]" <pbergson@allete_nospam.com> wrote: > Modify the read/write permission for the depts on the public and private to > read and all objects of the folder and sub-folder read/write. > > -- > Paul Bergson > MVP - Directory Services > MCTS, MCT, MCSE, MCSA, Security+, BS CSci > 2008, 2003, 2000 (Early Achiever), NT4 > > http://www.pbbergs.com > > Please no e-mails, any questions should be posted in the NewsGroup > This posting is provided "AS IS" with no warranties, and confers no rights.. > > "SF" <solutionfo...@gmail.com> wrote in message > > news:0ff944b8-2dc0-4eac-a836-598dec492668@p39g2000prm.googlegroups.com... > > > > > Hello All, > > > Currently in our domain we have a share on out 2003 server called > > workgroup. > > Each department has their own folder within that share. > > Within each dept folder there is a public folder and a private folder. > > The public folder is readable to the entire organization and writable > > by the dept members. The private is accessible to only to dept > > members. > > > Example: > > \\server\workgroup\accounting -> Domain Users -> read. > > \\server\workgroup\accounting\public -> Domain Users ->read. > > Accounting Group -> Modify. > > \\server\workgroup\accounting\private -> Domain Users ->No perms. > > Accounting Group -> Modify. > > > All folders are owned/created by administrator. > > > The problem is that since they have permissions on the folders, > > members of the accounting group can rename the public and private > > folders. > > > I want to have a folder that allows group members to add and remove > > files and folders within it but not allow them to modify the folder > > itself in anyway. > > > What am I missing? > > > Thanks for any advice.- Hide quoted text - > > - Show quoted text - Thanks for the help guys I figured it out. Thanks again
Recommended Posts