Prevent folder deletion
I have a file server and more than 150 users. How can I allow users to access their own folder and do whatever they want except delete their own folder?

Software/Hardware used:
ASKED: April 9, 2008  5:54 PM
UPDATED: April 16, 2008  4:12 PM

Answer Wiki:
What server are you running? Here is a way I do Windows 2003. When setting up the top level folder, I 1.Share the folder a.Permissions are set to everyone (or Domain Users) full control then on the Security tap, I select Advance and unselect the Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here. And when prompted select REMOVE. I then use the Add from this window and do the following: 2. ADD - Administrators, System and Creator Owner a.Apply onto i.This folder, subfolders and files b.Permissions i.Full control 3. ADD - Authenticated users a.Apply onto i.This folder, subfolders and files b.Permissions i.Read Attributes ii.Read Extended Attributes iii.Create Folders / Append Data iv.Read Permissions 4.Add another Authenticated Users a.Apply onto i.This folder only (ensure you are working with top folder) b.Permissions i.List Folder / Read Data I use access based enumeration (ABE) on all Windows Server 2003 with SP1 or later. http://tinyurl.com/cnn6w Windows Server 2003 Access-based Enumeration makes visible only those files or folders that the user has the rights to access. When Access-based Enumeration is enabled, Windows will not display files or folders that the user does not have the rights to access http://support.microsoft.com/kb/288991 If you have difficulty following this, let me know. Good luck
Last Wiki Answer Submitted:  April 10, 2008  6:40 pm  by  Dwiebesick   2,220 pts.
All Answer Wiki Contributors:  Dwiebesick   2,220 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

I’m not able to test this directly, but what Dwiebesick outlined seems to be a good solution. Also, make sure your users know that they shouldn’t be deleting folders (make it policy) and, of course, consistent backups will come in handy in the event something goes awry.

 11,040 pts.