Question

  Asked: Apr 29 2008   7:31 PM GMT
  Asked by: Windows Security ATE


How can I allow users to write to files but not delete them?


Windows Security, File permissions, Group permissions

I created a group in Windows Server 2003 called "Staff". I want to give this group permission to write to a file, (for instance edit a Word file and save it back to the same file) but not to move or delete files.
I have three boxes checked in the security tab of the properties window for the files for this group. Specifically, the Read & Execute box, the Read box and the Write box.

When a Staff member tries to save the file after editing, it comes up as "Access denied". I should note that I know this file is not open as "read only."

I have tried looking at the effective permissions for a staff member. This has the Write box ticked as I would expect.

If I check the Modify box in the security tab, then it allows the save. But then also allows the file to be deleted.

Am I misinterpreting what is meant by Write and Modify in this context? How do I allow users to write to but not delete files?

Subscribe to Alerts! Get questions and answers delivered to your Inbox.


E-mail me updates on this question



   SUBSCRIBE

hidden modal window

Answer Wiki (Improve, edit or add to this answer)


 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0



Go into "Advanced Settings" click on your Group, click on Edit, and tick the Delete box under Deny
  • AddThis Social Bookmark Button

Browse more Questions and Answers on Security.

Looking for relevant Security Whitepapers? Visit the SearchSecurity.com Research Library.


Discuss This Answer


You must be logged-in to discuss a question. Log-in/Register