How can I prevent users from deleting files?

Tags:
Network security
User Permissions
Windows Security
I have two or three remote users that come into my network on a VPN and map to a shared folder. I need to give them the ability to read, write and modify files and folders while at the same time preventing them from deleting those files and folders. Is there any way to do this?

Answer Wiki

Thanks. We'll let you know when a new response is added.

The only problem here is a modified file could be as useful as a deleted file if it doesn’t contain
the original required information. Eg, you could save an empty file with the same name and this would be a modify, but the same as a delete.
You can change permissions on files and folders, but as explained, this may not actually help.

One way would be to enable shadow copy if your using a windows 2003 file server and you have sufficient disk space to accommodate it.
This would then give you online restore points for any files and folders.

The problem with preventing users from deleting files is that Microsoft office won’t work correctly when they go to edit the files as it creates and deletes hidden files in the folder which it uses for scratch space. If you remove the delete permission you should set the CREATOR and OWNER virtual accounts to have delete rights. The down side to doing this is that users will be able to delete files which they create. This combined with the shadow copy will probably make a good solution for you.

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Schmidtw
    You should have automated backups. You could write some scripts to save the file under a different directory of originals before changes are made. Of course you could always make the files read-only or protected using security permissions.
    11,330 pointsBadges:
    report
  • Cults14
    If you're really serious about protecting data, Cisco have a product - Cisco Security Agent - which will allow just about any level of file security you wish. I've not used it, but have seen it and I think it will do what you want. I know you can go as far as preventing emailing, printing, save as - even screenshots. Not for the faint-hearted though (price and complexity) This help?
    70 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following