Can I prevent a user deleting a file?

[Nick]

We are trying to secure files from the creator of the
file. We want the current logged on user to be able to
create a file but not be able to delete it.

We can do this to some degree by removing the delete
privilege from the user in the folder and inheriting it
into the file. But the creator owner of the file can
still change permissions on the file to FULL to allow
deleting. We have tried denying change permissions and
read permisssions but to no avail. Can anybody help
please?

 

[David Jones]

You would need to deny Write access on each file.
Of course, this means they can't write (aka save)
anything to it either.

You may ask why that is - well, if someone can write to a
file, they can write "nothing" to the file, ie, a blank
file, therefore overwriting everything that was there.
When NTFS was designed, the creators of NTFS decided that
if you can overwrite whatever is there, that's just like
being able to delete what is there.