Guest Saravanan Posted November 8, 2007 Posted November 8, 2007 Hi, This is Saravanan and I'm working as a Windows System Admin in a company. I need a favour from you regarding the NTFS Permission on a Folder. Will be thankful if you help on the below given query. Problem: In my Company Setup , we have a Domain Controller which is having more than 500 Users. In that Domain Controller we have a Share Folder called " Installables" which contains lot of folders and files into that. Access Permission for that " Installables " Folder varies for all of the Users. I mean ..... some users have the full access for that folder. Some users have limited access for that folder and lot of users have the delete access for that folder. Now the requirement is to implement a task which has to remove only " Delete " option from that folder for all of the users so that all of the users should not have the delete access for that folder and subfolders and files. They should have the Read and Write access for that folder and subfolders and files. Only the delete option has to be removed . They should be able to have the Read & Write Permissions and they ahould have the ability to create the folders and Files. I have tried with Xcacls command to replace the NTFS permission for that folder. But its not working . Request you to help me if possible. I mean .... how to use the XCACLS for this particular requirement . Please let me know if anything required further on this. Thanks & Regards. Saravanakumar. M
Guest Lanwench [MVP - Exchange] Posted November 8, 2007 Posted November 8, 2007 Re: NTFS permission problem Saravanan <Saravanan@discussions.microsoft.com> wrote: > Hi, > > > This is Saravanan and I'm working as a Windows System > Admin in a company. I need a favour from you regarding the NTFS > Permission on a Folder. Will be thankful if you help on the below > given query. > > > Problem: > > In my Company Setup , we have a Domain Controller > which is having more than 500 Users. In that Domain Controller we > have a Share Folder called " Installables" which contains lot of > folders and files into that. Access Permission for that " > Installables " Folder varies for all of the Users. I mean ..... some > users have the full access for that folder. Some users have limited > access for that folder and lot of users have the delete access for > that folder. > > Now the requirement is to implement a task which has to > remove only " Delete " option from that folder for all of the users > so that all of the users should not have the delete access for that > folder and subfolders and files. They should have the Read and Write > access for that folder and subfolders and files. Only the delete > option has to be removed . They should be able to have the Read & > Write Permissions and they ahould have the ability to create the > folders and Files. > > > I have tried with Xcacls command to replace the NTFS > permission for that folder. But its not working . Request you to help > me if possible. I mean .... how to use the XCACLS for this particular > requirement . Please let me know if anything required further on this. > > > Thanks & Regards. > > Saravanakumar. M XCacls is what you want, but I'd check out this to make it easier - http://www.sh-soft.com/front_content.php?idcat=19 Note that assigning permissions to AD security groups is *much* better than assigning permissions to users. I'd create appropriately named AD groups, set the permissions on those groups, and add the users to the appropriate groups. You really don't want to continue having to manage a mess like you've got now. My general rule on folders is, from the shared folder level & downward, the NTFS permissions are always 100% identical all the way down the tree. If a company/department needs different permissions applied to various folders, those folders don't belong in this tree and need to be pulled out to different shares. Keeps things a lot simpler.
Recommended Posts