2

What would be the correct combination of NTFS special access permissions to allow an AD group (Authenticated Users) to copy files to a share, but after copying no one in the AD group should be allowed to edit, overwrite, rename, or delete the file? The AD group should also be able to copy files from the share to their machines.

3
  • 1
    smells like homework
    – Zypher
    Commented Apr 28, 2010 at 2:35
  • 1
    @Zypher - not homework - just didn't quite understand the special permission definition from Microsoft: Create Files/Write Data The Create Files permission applies only to folders and allows or denies the user from creating files in the folder. The Write Data permission applies only to files and allows or denies the user from making changes to the file and overwriting existing content by NTFS. Setting this permission gave me the desired result, but the wording seemed to be saying that that file would still be allowed to be overwritten and changed. Just wanted input from others.
    – thedugas
    Commented Apr 28, 2010 at 2:52
  • 1
    No worries, without that background information and the way you worded the question that question reads exactly like every review question i've ever read when working through MS Certification prep material. (also just to be clear we have no issue with homework questions as long as it is presented right meta.stackexchange.com/questions/10811/…)
    – Zypher
    Commented Apr 28, 2010 at 3:54

1 Answer 1

2

I'm assuming your are getting your definitions from here. It is a little confusing, what you want to watch out for when setting that particular permissions is the "Applies to" drop down. If you apply it only to folders(/subfolders/...) then you are good, if you apply it to file objects as well then the user will be able to overwrite what is there already.

0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .