Prevent folder deletion

Tags:
Permissions
Windows Security
I have a file server and more than 150 users. How can I allow users to access their own folder and do whatever they want except delete their own folder?

Answer Wiki

Thanks. We'll let you know when a new response is added.

What server are you running?

Here is a way I do Windows 2003. When setting up the top level folder, I
1.Share the folder
a.Permissions are set to everyone (or Domain Users) full control

then on the Security tap, I select Advance and unselect the Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here. And when prompted select REMOVE. I then use the Add from this window and do the following:

2. ADD – Administrators, System and Creator Owner
a.Apply onto
i.This folder, subfolders and files
b.Permissions
i.Full control
3. ADD – Authenticated users
a.Apply onto
i.This folder, subfolders and files
b.Permissions
i.Read Attributes
ii.Read Extended Attributes
iii.Create Folders / Append Data
iv.Read Permissions
4.Add another Authenticated Users
a.Apply onto
i.This folder only (ensure you are working with top folder)
b.Permissions
i.List Folder / Read Data

I use access based enumeration (ABE) on all Windows Server 2003 with SP1 or later. http://tinyurl.com/cnn6w

Windows Server 2003 Access-based Enumeration makes visible only those files or folders that the user has the rights to access. When Access-based Enumeration is enabled, Windows will not display files or folders that the user does not have the rights to access

http://support.microsoft.com/kb/288991

If you have difficulty following this, let me know.

Good luck

Discuss This Question: 1  Reply

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Kevin Beaver
    I'm not able to test this directly, but what Dwiebesick outlined seems to be a good solution. Also, make sure your users know that they shouldn't be deleting folders (make it policy) and, of course, consistent backups will come in handy in the event something goes awry.
    17,220 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following