File Security - Permissions and Rights

[Archcol]

We have the same problem as listed below.

Domain Users need almost full access to modify data.
It is undesireable that they may accidentally move copy or
delete existing folders. Users should be able to add new
folders in certain subdirectories and modify most files.

One thought would be to restrict access at the folder
level of existing folders only, and frequently add this
restriction to new folders.
Second thought would be to restrict folder creation or
deletion by users at a certain level and have managers be
responsible for this.

Are we on the right track?
Is there an easier way to set the desired permissions?

------------------------------------------------------

Hi,

Recently, found out that users could not log on to the
database (an error occur when running the program) and
later found out that the database folder has been moved to
another directory in my server.

To prevent this from happenned, I would like to know how
and where can i set in Windows 2000 server to block users
from moving my files to another location?

Currently, the permission granted is full access because
in order to write to the database files, users needs to
have full creation and deletion access rights.

As compare with Novell, users can be block from dragging
files to another location. How this can be done in Windows
2000 server?
Please help.
Thanks.
Rgds,
Anny
..

 

[Steven Umbach]

Most of this can probably be accomplished if you use ntfs advanced permissions.
I don't know the exact solution for you but wanted to mention that users/groups
can have multiple entries in the advanced permissions page. For instance they
can have separate entries for the different categories in the "apply onto" drop
down box such as folder, files only, subfolders and files. This allows very
granular control such as giving a group only read/list to a folder but modify to
files and subfolders. --- Steve