dtong101
Guest
|
 Posted:
Mon Sep 27, 2004 7:13 am Post subject:
NTFS assignment at different folder level... |
|
|
Hi, This is a NTFS problem when users are not allowed to make changes at one
folder level but are given change rights underneath it.
Tested folder level scenarios so far :
Case1-
LevelA - Read only
LevelB - Modify, but "Allow inheritable permission from above..." unchecked.
Effects : 1. User cannot add or change folder at LevelB. => Good
2. Can do everything underneath it. => Good
3. BUT it can DELETE folder at LevelB. :(
Case2-
LevelA - Read only
LevelB - Read only with special rights of everything but "change permission".
Also "Allow ineritable permisson from above..." unchecked.
Effects : 1. User cannot add, change, or delete at LevelB. => Good
2. Cannot add folder at LevelC but underneath it OK. :(
Case3
LevelA - Read only
LevelB - Read only
LevelC - Modify and "Allow ineritable permisson from above..." unchecked.
Effects : 1. User cannot add, change, or delete at LevelB => Perfect.
2. Can do everything at LevelC => Perfect.
The only problem is that we have a huge number of LevelB folders. Prior to
this, there are little NTFS rights applied. These rights have to be applied
all at once. Does anyone know of any special technique to do it with
straight NTFS? Are there tools available for scenarios of Case3?
Any help are much apprciated.
Thanks.
Dan |
|
Craig
Guest
|
| Posted:
Wed Sep 29, 2004 8:30 am Post subject:
NTFS assignment at different folder level... |
|
|
Hello Dan,
Sounds like you have to re-take ownership of the parent
and childs.
Might want to run chkdsk /f prior to do it.
Craig
| Quote: | -----Original Message-----
Hi, This is a NTFS problem when users are not allowed
to make changes at one
folder level but are given change rights underneath it.
Tested folder level scenarios so far :
Case1-
LevelA - Read only
LevelB - Modify, but "Allow inheritable permission from
above..." unchecked.
Effects : 1. User cannot add or change folder
at LevelB. => Good
2. Can do everything underneath it.
=> Good
3. BUT it can DELETE folder at
LevelB. :(
Case2-
LevelA - Read only
LevelB - Read only with special rights of everything
but "change permission".
Also "Allow ineritable permisson from above..."
unchecked.
Effects : 1. User cannot add, change, or delete
at LevelB. => Good
2. Cannot add folder at LevelC but
underneath it OK. :(
Case3
LevelA - Read only
LevelB - Read only
LevelC - Modify and "Allow ineritable permisson from
above..." unchecked.
Effects : 1. User cannot add, change, or delete
at LevelB => Perfect.
2. Can do everything at LevelC =
Perfect.
The only problem is that we have a huge number of LevelB
folders. Prior to
this, there are little NTFS rights applied. These
rights have to be applied
all at once. Does anyone know of any special technique
to do it with
straight NTFS? Are there tools available for scenarios
of Case3?
Any help are much apprciated.
Thanks.
Dan
.
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in