Windows 10 Need help customizing file share permissions: User can manipulate FILES, but not folders.

[DMGonzalez-Web]

Hello. I need to customize a shared folder on my network so that one user (Reba) can create, append, modify, delete all FILES within that folder and subfolders... but Reba should not be able to create or delete the FOLDERS.


The closest I've been able to come is to create TWO sets of Advanced permissions for Reba. When tested, this configuration (shown below) does allow Reba to manipulate files and correctly denies her the ability to create folders/subfolders... but it incorrectly ALLOWs her to delete folders (which I do NOT want her to be able to do).


Also... I wasn't sure what to do with the options to "Only apply these permissions to objects and/or containers within this container."



1. The first instance of Reba, is ALLOWED, applied to "This folders and subfolders,"

• Traverse folder / execute file
• List folder / read data
• Read attributes
• Read extended attributes
• Create files / write data
• Write attributes
• Write extended attributes
• Delete subfolders and files
• Read permissions

But Reba is DENIED permissions of:

• Full control
• Create folders / append data
• Delete
• Change permissions
• Take ownership

2. The second instance of Reba, is ALLOWED, applied to "Files Only:"

• Traverse folder / execute file
• List folder / read data
• Read attributes
• Read extended attributes
• Create files / write data
• Create folders / append data
• Write attributes
• Write extended attributes
• Delete subfolders and files
• Delete
• Read permissions

But Reba is DENIED permissions of:

• Full control
• Change permissions
  
• Take ownership

Does anyone know how to fix this so that Reba is NOT able to delete folders?


Thanks!!!

Continue reading...