How do I deny delete permissions?

Microsoft Windows Server 2003
Windows Security
I am on a Windows Server 2003 environment and I am currently working on folder permissions. Here is a small diagram of folders: Folder A / B C / / D E F G I am trying to deny deleting folders A, B and C but still allow users below that level to delete and perform permission changes. The problem is when a user creates a folder under the B-level folders or the C-level folders, they inherit the deny permission of delete etc. from folders B or C. I have stopped the inherit permissions from the folders that are currently under B and C, but, like I said, if a user needs to create another folder like I or J in it, then they can no longer delete or change permissions.

Answer Wiki

Thanks. We'll let you know when a new response is added.

When you remove inherit permissions from parent the typical choice is to copy the parent permissions for teh folder permissions. After this copy of the permissions you must maintain the folder permissions for each folder manually.

I would recommend switching the way you may be thinking about this around a bit because this is going to be more work. Instead of removing the inhereit permissions from parent from the folders you want to deny delete for… why not simply add the deny delete folder permission directly to these folders via a special permission?

To change permissions right click the folder (or file) and select properties. Then go to the security tab and click add to add the the user (or group) you will need to have permissions. In my examples I suggest to add the “deny” permission for delete, this is accomplished by going to the advanced button instead of teh add button. Type in the username, like before, and click ok. The resulting window will have a list of permissions available— Delete is one of them. Select the box in the deny column and you’re good to go after clicking ok.

Discuss This Question: 1  Reply

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • JonHassell
    There is another option that you can put on folders D, E, F, G that will carry over to any folders that are created on them – it’s the “Replace all existing inheritable permissions on all descendants with inheritable permissions from this object.” On each folder D, E, F, and G, go to Properties, head to the Security tab, click Advanced, click Edit (if you’re on Vista), and then click that applicably named checkbox at the bottom of the page. This basically says to Windows that the settings on these folders should automatically apply to any descendates (folders H, I, J and so on) created under this level. It won’t affect the deny permissions you’ve set up on A, B, and C.
    1,880 pointsBadges:

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.


Share this item with your network: