Prevent a user from deleting a private folder in their profile Home Folder


we have upcoming archiving project will
archive, stub , remove contents of our users' home folders (u:\ drive).
there option exclude private folder. need create new
folder in users home folder cannot rename or remove will have
full control of contents of new private folder not
archived.

able work once by removing (not denying) "delete subfolders , files" on parent folder u:\ drive but also prevents user being able to change in root of u:\ drive won't work.

i need able replicate creation of private folder of our users
, lock down folder domain admins can remove or rename
folder u:\ drive. users need able store whatever
not want archived in folder.

can offer suggestions?

i figured out.  here steps used

  1. on parent folder (u:\ drive), users permissions need adjusted remove not deny "delete subfolders , files" option folder only
  2. still on parent folder, add full control creator owner subfolders , files only
  3. on private folder locked down, grant full control user to folder, subfolders , files
  4. still on private folder, deny delete user for folder only

this procedure allows user add , remove files , folders @ root of home folder not delete private folder.  retain ability add , remove files , folders @ within private folder.

if knows easier way this, please post procedure.  use assistance in replicating these procedures across domain of on 500 accounts.




Windows Server  >  File Services and Storage



Comments

Popular posts from this blog

Error: 0x80073701 when trying to add Print Services Role in Windows 2012 Standard

Disconnecting from a Windows Server 2012 R2 file sharing session on a Windows 7,8,10 machine

Event ID 64,77,1008 Certificates Events Windows Server 2008, 2008R2