NTFS Permissions to stop student deleting a file! Please help....seems so simple!

[burgemaster]

This to me seemed a really simple request. But it just isn't working or I am missing some fundamental understanding!

 

File "test.txt" is placed in a students home drive. I don't want that user to be able to delete that file. So in the security tab, I set a "DENY" in the "delete" checkbox for this file.

 

They can still delete it? I then (to rule out any problems with the file server, inheritance, propagation from above) shared a new home folder on my PC and mapped the students home drive to it. Still the same.

 

Am I missing something here!!

 

Thanks in advance

[ThomL]

screen shot of how you have the permissions currently set?

 

i'd target a security group that contains all students as members and then set the deny, making sure that there is no inheritance etc.

[burgemaster]

Hi,

No problems, we did start denying the group but then narrowed it down to user. We even tried deny "everyone" delete but they were still able to delete it.

The

Here are our permissions (The blanked out section is just the owner):

[Admiral208]

if you put a file in their home drive they will have the permission to delete subfolders and files from that. This is why you cannot stop the file from being deleted.

[burgemaster]

Ok, so even a "delete" set on that file will be ignored? ok thanks.

 

Could you suggest how you would setup security on this please?

Need a file placed into student areas that they cannot delete! They need to be able to open and save it.

 

Thanks

[Admiral208]

I dont think you will be able to put a file in their home drive and protect it. I would put it in a shared area with the correct permisions and put a shortcut into their home drive.

[burgemaster]

Thanks, but we need each and every student to have their own file that they can edit. Will look at creating a folder and setting permissions for "this folder subfolder and files" etc

[ThomL]

Any permissions you set will get inheritance, you would have to set it explicitly per user. Breaking inheritance changing ownership to an admin and then allowing the user modify but denying delete - for each user.

 

you may be able to put the file in the users home area then using GPO/batch files set the permissions as they log in or once a year or something to achieve the above...

 

could you not place a link on students desktop/home area to shared storage that has the files in? that way you could set permissions with deny student delete inheritance? and once set at the folder level the sub folders/files would inherit the correct permissions? much in the same way home drives should be set up with a "this folder subfolder and files" as you mention?

Edited September 6, 2013 by ThomL

[DaveCoop]

Have you got a standard desktop, you could place the file on their desktop and edit permissions that way and stop them from deleting it, else messing with inheritance is going to cause a lot of problems in the long run!