File security

[Nicholas Valentine]

We are trying to secure files from the creator of the
file. We want the current logged on user to be able to
create a file but not be able to delete it. We can do
this to some degree by removing the delete privilege from
the user in the folder and inheriting it into the file.
But the creator owner of the file can still change
permissions on the file to FULL to allow deleting. We
have tried denying Delete permissions and read
permisssions but to no avail. Can anybody help please?

 

[Guest]

For file/folder permissions, remove all permissions except MODIFY. This allows all permissions except "Delete Subfolders and Files", "Change Permissions", and "Take Ownership".

You could also just DENY "Change Permission".