I feel like I am missing something obvious here. Or just making a noob mistake.
I have a folder structure as shown in the example below. Folder
A2 are inside folder
B2 are inside folder
A1 and so on.
Folder A | | | |--------Folder A1 | |---------Folder B1 | |---------Folder B2 |--------Folder A2 | |---------Folder C1 | |---------Folder C2
I want to create a group permission on folder
A that prevents users from creating, deleting or moving a file or folder inside of it (i.e. they can't move or delete A1 and A2, etc.), but not affect anything in Folder
I created the following rules on Folder
Group A (the one i want to limit).
Name: Group A Apply to: this folder and subfolders Deny Create files / write data Deny Create Folders / append data Deny Delete subfolders and files Deny Delete Checkmarked: Apply these permissions to objects and/or containers within this container only.
Name: Group A Apply to: This folder, subfolders and files Allow everything but Full Control, Delete, change permissions, take ownership NOT checkmarked: Apply these permissions to objects and/or containers within this container only.
I know many people are against the use of
Deny permissions because of the fact it can easily override all others. etc. But I don't feel intelligently set up
Deny rules should be ignored as a non option.
Now the actual problem occurs inside Folders
C1, etc. I can delete folders/files and move folders inside of other folders. I can't however create folders or files. I also can't move folders into folders
B2, etc. (Even though I can them move out).
When I check the permission on the folders inside of
A2 I see nothing wrong. When I check the permissions ON
A I see the rules only apply to THIS folder and not SUBFOLDERS.
A Microsoft Article (TechNet: Selecting where to apply permissions) says that when I checkmark
"Apply these permissions to objects and/or containers within this" the rules should only apply to subfolders within Folder
A and not subsequent folders.
Edit: Note: I tried multiple methods including not using
Deny or any kind of implicit rules.