Restrict modification of folders but not files

[stevep]

Hi,

I have an issue with file/folder permissions on a share.
I want to allow a group to modify all files within a share, but not any
folders.
The 'Create Folders/Append Data' permission seems to be what I am
after, but I'd like one of these to be allowed and one denied.
Outside of setting explicit read and create permissions on each folder
in the share, is there any other way I can set the permissions?

Thanks
Steve

 

[Roger Abell [MVP]]

When in the advanced view of the NTFS permissions, did you
notice the dropbox for what the highlighted ACE applies-to ??
For example, you can set List and this shows as applying to
This folder and subfolders. For the specific grant that you
mention 'Create Folders/Append Data' the first, before the / is
how the bit is interpreted for folder objects, while that after the
/ is for file objects. So, if that ACE is set to apply to Files only,
then it is a grant for Append Data
It sounds like you are looking for a List grant plus a grant of
Modify for files only.

 

[stevep]

Roger,

Thanks alot, it seems as though this has fixed the issue.

Regards
Steve