NTFS permission problem

[Guest Saravanan]

Hi,

 

 

This is Saravanan and I'm working as a Windows System

Admin in a company. I need a favour from you regarding the NTFS Permission on

a Folder. Will be thankful if you help on the below given query.

 

 

Problem:

 

In my Company Setup , we have a Domain Controller which is

having more than 500 Users. In that Domain Controller we have a Share Folder

called " Installables" which contains lot of folders and files into that.

Access Permission for that " Installables " Folder varies for all of the

Users. I mean ..... some users have the full access for that folder. Some

users have limited access for that folder and lot of users have the delete

access for that folder.

 

Now the requirement is to implement a task which has to remove

only " Delete " option from that folder for all of the users so that all of

the users should not have the delete access for that folder and subfolders

and files. They should have the Read and Write access for that folder and

subfolders and files. Only the delete option has to be removed . They should

be able to have the Read & Write Permissions and they ahould have the ability

to create the folders and Files.

 

 

I have tried with Xcacls command to replace the NTFS

permission for that folder. But its not working . Request you to help me if

possible. I mean .... how to use the XCACLS for this particular requirement .

Please let me know if anything required further on this.

 

 

Thanks & Regards.

 

Saravanakumar. M

[Guest Lanwench [MVP - Exchange]]

Re: NTFS permission problem

 

Saravanan <Saravanan@discussions.microsoft.com> wrote:

> Hi,

>

>

> This is Saravanan and I'm working as a Windows System

> Admin in a company. I need a favour from you regarding the NTFS

> Permission on a Folder. Will be thankful if you help on the below

> given query.

>

>

> Problem:

>

> In my Company Setup , we have a Domain Controller

> which is having more than 500 Users. In that Domain Controller we

> have a Share Folder called " Installables" which contains lot of

> folders and files into that. Access Permission for that "

> Installables " Folder varies for all of the Users. I mean ..... some

> users have the full access for that folder. Some users have limited

> access for that folder and lot of users have the delete access for

> that folder.

>

> Now the requirement is to implement a task which has to

> remove only " Delete " option from that folder for all of the users

> so that all of the users should not have the delete access for that

> folder and subfolders and files. They should have the Read and Write

> access for that folder and subfolders and files. Only the delete

> option has to be removed . They should be able to have the Read &

> Write Permissions and they ahould have the ability to create the

> folders and Files.

>

>

> I have tried with Xcacls command to replace the NTFS

> permission for that folder. But its not working . Request you to help

> me if possible. I mean .... how to use the XCACLS for this particular

> requirement . Please let me know if anything required further on this.

>

>

> Thanks & Regards.

>

> Saravanakumar. M

 

XCacls is what you want, but I'd check out this to make it easier -

http://www.sh-soft.com/front_content.php?idcat=19

 

Note that assigning permissions to AD security groups is *much* better than

assigning permissions to users. I'd create appropriately named AD groups,

set the permissions on those groups, and add the users to the appropriate

groups. You really don't want to continue having to manage a mess like

you've got now.

 

My general rule on folders is, from the shared folder level & downward, the

NTFS permissions are always 100% identical all the way down the tree. If a

company/department needs different permissions applied to various folders,

those folders don't belong in this tree and need to be pulled out to

different shares. Keeps things a lot simpler.