Hi,

We've created a folder structure which is pretty much open to everyone RW.
However, we would like to control the top two levels only, so that none of
the users can create new files or folders at those two levels. (They will
also not be able to move, rename or delete the existing folders but we will
do this by setting the administrators group as owner).

What is the best way of doing this?

Click on the Advanced tab when in the NTFS permissions editor.
Then, highlight a grant and click Edit.
Notice that there is a drop box for what that grant 'applied to" ?
You need to set permissions for the top two folders that apply
to This folder only, and then grants (set on the second level of
the top two) that apply to Subfolders and files only.

"F Laufs" <FLaufs@discussions.microsoft.com> wrote in message
news:6A383A18-85B2-42AF-B2C0-77D63DDD4359@microsoft.com...
> Hi,
>
> We've created a folder structure which is pretty much open to everyone RW.
> However, we would like to control the top two levels only, so that none of
> the users can create new files or folders at those two levels. (They will
> also not be able to move, rename or delete the existing folders but we
> will
> do this by setting the administrators group as owner).
>
> What is the best way of doing this?

Roger

Thank you for this.

Regards

Fiona


"Roger Abell [MVP]" wrote:

> Click on the Advanced tab when in the NTFS permissions editor.
> Then, highlight a grant and click Edit.
> Notice that there is a drop box for what that grant 'applied to" ?
> You need to set permissions for the top two folders that apply
> to This folder only, and then grants (set on the second level of
> the top two) that apply to Subfolders and files only.
>
> "F Laufs" <FLaufs@discussions.microsoft.com> wrote in message
> news:6A383A18-85B2-42AF-B2C0-77D63DDD4359@microsoft.com...
> > Hi,
> >
> > We've created a folder structure which is pretty much open to everyone RW.
> > However, we would like to control the top two levels only, so that none of
> > the users can create new files or folders at those two levels. (They will
> > also not be able to move, rename or delete the existing folders but we
> > will
> > do this by setting the administrators group as owner).
> >
> > What is the best way of doing this?
>
>
>