Q

Setting NTFS rights to deny Delete permission

Site expert Wes Noonan explains how to set NTFS rights on a Windows 2000 Advanced Server so that users are not able to delete files or folders, but they are able to save and make changes.

I have an NTFS folder on Windows 2000 Advanced Server. I want to set rights to this folder so that users are not able delete files or folders, while at the same time they are able to save and make changes in that folder. How can I do this?
This can be done by editing the advanced security properties of the folder and files. To do this, right click on the folder in question and select "Properties." Select the Security tab and click "Advanced." Add or edit the appropriate users and specify the following permissions:

          Traverse Folder/Execute Data            List Folder/Read Data            Read Attributes            Read

Extended Attributes            Create Files/Write Data            Create Folders/Append Data            Write Attributes            Write Extended Attributes            Read Permissions            Change Permissions

You may or may not need all of the above permissions for your specific requirements. The key is to remember to NOT grant the "Delete Subfolders and Files" and "Delete" permissions.

Keep in mind that you may need to remove inheritance to allow you to make the necessary changes.

This was first published in August 2005

Dig deeper on Network intrusion detection and prevention and malware removal

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

SearchVirtualDesktop

SearchWindowsServer

SearchExchange

Close