Problem solve Get help with specific problems with your technologies, process and projects.

Setting NTFS rights to deny Delete permission

Site expert Wes Noonan explains how to set NTFS rights on a Windows 2000 Advanced Server so that users are not able to delete files or folders, but they are able to save and make changes.

I have an NTFS folder on Windows 2000 Advanced Server. I want to set rights to this folder so that users are not able delete files or folders, while at the same time they are able to save and make changes in that folder. How can I do this?
This can be done by editing the advanced security properties of the folder and files. To do this, right click on the folder in question and select "Properties." Select the Security tab and click "Advanced." Add or edit the appropriate users and specify the following permissions:

          Traverse Folder/Execute Data
           List Folder/Read Data
           Read Attributes
           Read Extended Attributes
           Create Files/Write Data
           Create Folders/Append Data
           Write Attributes
           Write Extended Attributes
           Read Permissions
           Change Permissions

You may or may not need all of the above permissions for your specific requirements. The key is to remember to NOT grant the "Delete Subfolders and Files" and "Delete" permissions.

Keep in mind that you may need to remove inheritance to allow you to make the necessary changes.

Dig Deeper on Network intrusion detection and prevention and malware removal