I have a shared folder in my network under windows server 2012 r2, I have 1 user that I would like to deny him from deleting any files on the folder. The problem is that he is part of a group that has access to modify the folder.

Folder 'test' ( network folder ) Group 'Group1' has access to modify / read / write 'test' folder. The user 'user1' is part of 'Group1', I would like to deny only him from deleting any files, but still have the same network access as 'Group1' and still be able to view the files.

Is it possible? I don't want to remove him from the group because they have some permissions on this group only.

  • It would be nice to know the operating system we are talking about. Apr 23, 2017 at 14:50
  • the network folder is under windows server 2012 r2
    – Shlomi
    Apr 23, 2017 at 14:52

1 Answer 1


Set the Delete and Delete Subfolders and Files permissions to Deny for this user on the folder. This is an explicit permission which will take precedence over the permissions he is inheriting from his group membership. He'll retain all of the other permissions from his group membership.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .