Quantcast
Channel: Windows Server
Viewing all articles
Browse latest Browse all 26364

2008r2 Delete Permission allows for Creating and Saving Files?

$
0
0

Here's what I want to do: 
Give the ability to read/write/modify but not delete

Extra info:
shares are set up using GP.

Here's my topography:
Shared-Drives folder
Department1 share
Department2 share
and so on

I have security groups set up that contains all the employees in each department.

Under security for each share/folder I have added that security group under the security tab of each Department share folder

I have went under advanced, selected the security group and clicked "change permissions"
I have checked "Replace all child object permissions..." and clicked "Edit..."

Here I have "Apply to: This folder, subfolders and files" and the following checked:
Traverse...
List folder...
Read att...
Read Extend...
Create Files...
Create Folders...
Write Attributes...
Write Extend...

Read per...

With these permissions, the users of that group can create folders and documents but they can't name them or save changes to them.

Now, if I go back and add the Delete permission, all is well, but now they can delete files- which I don't want them to do.  Perhaps I just don't understand the Delete permission?  Any ideas would be appreciated.  Thanks!


Viewing all articles
Browse latest Browse all 26364

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>