Making NTFS permissions read/write without ability to create/delete folders

Out at one of our job sites we have a server running Windows Server 2012 R2 that's got a file share accessible to our onsite people. Our project managers have devised a very strict folder structure for this file share, and for auditing purposes they want
to stick as close to this structure as possible.
Therefore, although people onsite must have read/write access to create, modify and delete files, they do not want them to be able to create or delete folders. They want them to use the existing folders and not tuck stuff away into folders that no one knows
exists except the person who created them.
The closest way I've found to do this is to deselect the advanced permissions 'Create folders / append data' and 'Delete subfolders and files.' This has a few side effects however, the most noticeable being that due to not being able to append data to files,
certain files (such as CAD drawings) can't be edited by anyone except the person who created them.
Is there a way using just NTFS permissions to accomplish what the project managers want? And if not, are there any useful third-party utilities that will help us do this?
Thanks in advance for any assistance.

Hi,
I'm not much familiar with AutoCAD- what's the exact behavior which is stopped by the restricted folder permission?
For example, if AutoCAD will create a folder in editing, we will not have a solution as users needed to create folders so that AutoCAD could run properly. 
And if AutoCAD works like Office files, that create a temp file for editing, this will be the solution:
1. Give Domain Admins - Full Control - This folder, subfolders and files.
This is to allow all admin could access and edit all data.
2. Give SpecificUsers group (a group contain all normal users) - Full Control without "Change permissions" and "Take Ownership" -
Files Only.
This is to give that group most permissions to create, edit and delete files but not Folders.
3. Give SpecificUsers group another permission:
Traverse folder
List FOlder
Read Attributes
Read extended attributes
Create files - this is important. Without this permission you will not able to save Office files. 
Read permissions.
Give above permissions to "This Folder, subfolders and files".
This is to allow users to access all subfolders. 
If you have any feedback on our support, please send to [email protected]

Similar Messages

  • I am moving from PC to Mac.  My PC has two internal drives and I have a 3Tb external.  What is best way to move the data from the internal drives to Mac and the best way to make the external drive read write without losing data

    I am moving from PC to Mac.  My PC has two internal drives and I have a 3Tb external.  What is best way to move the data from the internal drives to Mac and the best way to make the external drive read write without losing data

    Paragon even has non-destriuctive conversion utility if you do want to change drive.
    Hard to imagine using 3TB that isn't NTFS. Mac uses GPT for default partition type as well as HFS+
    www.paragon-software.com
    Some general Apple Help www.apple.com/support/
    Also,
    Mac OS X Help
    http://www.apple.com/support/macbasics/
    Isolating Issues in Mac OS
    http://support.apple.com/kb/TS1388
    https://www.apple.com/support/osx/
    https://www.apple.com/support/quickassist/
    http://www.apple.com/support/mac101/help/
    http://www.apple.com/support/mac101/tour/
    Get Help with your Product
    http://docs.info.apple.com/article.html?artnum=304725
    Apple Mac App Store
    https://discussions.apple.com/community/mac_app_store/using_mac_apple_store
    How to Buy Mac OS X Mountain Lion/Lion
    http://www.apple.com/osx/how-to-upgrade/
    TimeMachine 101
    https://support.apple.com/kb/HT1427
    http://www.apple.com/support/timemachine
    Mac OS X Community
    https://discussions.apple.com/community/mac_os

  • NTFS Permissions for a scanner to only create files?

    I'm having some trouble correctly configuring NTFS permissions. My file structure is as such:
    \Scanner\%username%\
    We want anyone to be able to walk up to the scanner, scan a document and drop it in a particular users folder. What we don't want is users being able to view files via the scanner interface.
    My permissions are configured as such:
    Root Folder \scanner\
    Allow
    This Folder & Subfolders
    Traverse, List folder, Read Attributes, Read Extended, Read Permissions
    Allow
    Subfolders & files only
    Create Files / write data
    What am i missing here? 
    This topic first appeared in the Spiceworks Community

    By Guest Blogger Brad Mathis, Senior Consultant, InformationSecurity It is mid-2015. By now, we have all seen incoming emails claiming we have been bequeathed a huge sum of money from a Nigerian Prince, or we have won a foreign lottery we never entered. Most employees have seen these scam emails long enough to know they are not real. However, What about the seemingly benign email coming in from a recognizable sender? What if this legitimate looking email has an attached PDF or Word document? What if it contains a seemingly real link to a web site? How many of your employees would open the attachment or click on the link? How many employees will assume it is safe since it made it unscathed through all of your layers of security, including email and web content filters? Do your users understand the ramifications of...

  • Read/Write vs Full Control on KM folders/files

    I've read some docs on what Read/Write vs Full Control permissions mean when setting permissions for users/groups for folders and files. But I'm still somewhat confused.
    What exactly does the 'Write' mean in Read/Write. Does Write mean a user can:
    Create a new folder
    Create a new file
    Modify an existing file
    Delete a file
    Delete a folder
    When you use the pull down for setting permissions, you see: Full Control, Read/Write, Read, Write and Delete. Kind of confusing. And you can only select one of them.
    Any clarification on these permissions would be greatly appreciated. Or pointing me to some good documentation.
    Thanks in advance. Ron

    Access authorizations
    Read
    Permission to display items.
    Write
    Permission to change items but not to display them.
    In folders, this permission also allows users to create items.
    Read/Write
    Permission to display and change items.
    In folders, this permission also allows users to create items.
    Delete
    To delete an item, you require delete permission (or full control) for this item and write permission for the superordinate folder.
    Full Control
    This permission contains all other permissions.

  • Question about NTFS Permissions (Read Permissions)

    Hello All,
    I hope somebody can help me. I am wondering about the ACL Atribute "Read Permissions"
    Lets say I created a shre named "Share1"  were "User1" has read Access. I created a Folder named "Folder1" in share. In the NTFS Permssions I specified that User1 can "Traverse Folder and List Folder" . With These
    t atributes set the User is able to Access Folder1. But when I copy a File there - doesnt matter if it is a text document, an exe file, or so, the user is not able to Access the ressource. He gets an Acces Denied Error. Only if I add the Permission "Read
    Permissions" the user is able to open the file.
    I dont get why the user is able to open the Folder but not to execute files with the same permission. Is it possible to open a Folder without "Reading Permession Atribute" but not open a file?
    Why is the Feature available if i cant block users from reading permissions of a specific file?
    Thanks a lot in advance.
    Marco

    Something isn't adding up.  "Read Permissions" should be there by default because just about any basic permission grants the "Read Permissions" advanced permission. See the tables in the following TechNet to see what I mean.
    http://technet.microsoft.com/en-us/library/bb727008.aspx
    Check the Scope for the User1 entry on the Folder1 ACL. The Scope is shown under the "Applies to" section from the screenshot below.  If it doesn't read "This Folder, subfolders, & files" you may want to see if changing to that makes a difference.  

  • External Hard drive suddenly will only read! How can I make it read/write again?

    Hi folks,
    I'm working with a Seagate FreeAgent GoFlex 320gb External Hard Drive on the imacs here at my university. I have it formatted to ExFAT so that I could use it with my pc as well but I've never had to so far so it's only ever been used on the uni imacs.
    It's been fine for working on media projects until suddenly when i came back to uni after the Christmas break I went to continue working on a film project and realised the external hard drive now said read only??
    One thing I did was to put all of my work from last semester (which is everything that was on the hard drive into a single folder) could that have caused the problem?
    And does anyone know how i can reset my permissions to read/write without causing damage or risk to the files on the hard-drive as I can't clear the disk (i have no where else to store the 185gb of video footage).
    I'd really appreciate it if anyone could tell me how i can fix it? I know how to do all of this on my pc but i've no idea with the mac as i only use it for my media projects here in the university.
    Thanks!
    DrF ;-)

    Out of curiosity , will this method also work for an external drive formatted to NTFS.. I have a lot of data that I have nowhere to Float while re-formatting the drive , so If this method would allow me to keep the data and still fix the problem that would be great !!  At the moment the drive is formatted to NTFS and permissions say Read/Write , but I can only Read.. Very Frustrating as my mac drive is running low on space and performance is being affected.. Any help appreicated !!

  • Transportable tablespace (metadata export with READ WRITE tablespace set)

    Is it possible to use transportable tablespace backup for import if data files for tablespace set has been copied when tablespaces were READ ONLY but the metadata export (or a part of it) is taken after tablespaces has been set to READ WRITE?

    Actually the size of datafile(s) are too huge so unable to test the same on test box with TTS export backup.
    But my question is if there were no structural changes (DML might be there on tablespace objects) even after making tablespaces to READ WRITE till the time metadata export is completed(data files are copied to staging location already before tablespaces has been set READ WRITE), Shall I use these backup for import?

  • I have a FAT 32 External Hard Drive marked as Read Only that is unchangeable by an administrator or root user, how can I make it read/Write

    Hello, All,
    I have a FAT 32 External Hard Drive marked as Read Only that is unchangeable by an administrator or root user, how can I make it read/Write without reformatting it ? 

    Hi Kappy,
    Just wondering if you had any advice for my situation . . .
    My time machine backup was backing up to a drive that was "Mac OS X Enteded Journaled, Case Sensitive."  I had no idea what this meant, or that it would even cause issues.
    I took my computer to the Apple store yesterday, and they wiped it clean.  When they tried to restore it from the Time Machine backup drive, it would not work.  Their guess is that Time Machine cannot restore from a drive that is "case sensitive."
    Any thoughts on how I can convert my time machine backup data from a "case sensitive" state, to a "non-case sensitive" state?  I've tried to just drag and drop the files from the case sensitive formatted drive to a new drive that I have that is formatted non case sensitive, but I get the following error message:
    "The volume has the wrong case sensitivity for a backup"
    I just really want my data back - I thought TimeMachine was the way to go (and was supposed to work) but unfortunately it is not.
    Any help you can provide would be greatly appreciated.
    Thanks,

  • Cant create/convert image to read/write with Disk Utility

    dear all, because of some reasons, I have to combine files from 2 Recovery DVDs into one, and since the first disc is bootable and have guiding program installed, so my idea is:
    1. Create a read/write image of the first disc
    2. Mount the image
    3. Add files of disk 2 into the image
    I'm using Mac OS X 10.6.6 and Disk Utility is 11.5.2
    My question is:
    No matter I choose "New Image" and select "read/write" to create a new image, or I choose "Convert" and select "read/write" to convert a created image, the results are the same: I still get READ-ONLY image only.
    Is there any trick, or is the version of disk utility got some issues?
    Or is there any other free tool can do so?
    I have Toast 10 and it's image merging functions seemed not working either...
    Thanks all in advance

    If your database version is 11g R2 then you can use active database duplication as Hermant says.
    http://taliphakanozturken.wordpress.com/2011/06/26/creating-standby-database-with-rman-active-database-duplication-in-11gr2/
    Otherwise you need data pump export/import, transportable tablespace, etc to transfer your data.
    Talip Hakan Ozturk
    http://taliphakanozturken.wordpress.com/

  • How to enable the NTFS Read/Write support without 3rd party software?

    Is there a way to enable the NTFS Read/Write support of Mac OS X 10.6.8?

    Well, I've used Paragon NTFS, but if you don't want to use 3rd party software, you should do this AT YOUR OWN RISK:
    Open Terminal.app (/Applications/Utilities/Terminal)
    Type "diskutil info /Volumes/volume_name" and copy the Volume UUID (bunch of numbers).
    Backup /etc/fstab if you have it, shouldn't be there in a default install.
    Type "sudo nano /etc/fstab".
    Type in "UUID=paste_the_uuid_here none ntfs rw" or "LABEL=volume_name none ntfs rw" (if you don't have UUID for the disk).
    Repeat for other NTFS partitions.
    Save the file (ctrl-x then y) and restart your system.
    After reboot, NTFS partitions should natively have read and write support. This works in both 32 and 64-bit kernels. Support is quite good and fast, it even recognizes file attributes such as hidden files.
    Good luck!

  • NTFS Permissions - Need Read, List, Delete not Write or Modify

    I don't think you can have delete, but not write or modify.

    I'm setting up Network printing to a shared folder on a server.  I want the users to be able to browse and see the files the printer's scan there and delete them when moved off.  I don't want the folder to be used for long term storage so I don't want write or modify on it (ie user opens a scaned file makes changes and just clicks save).  How do I go about setting this up with NTFS permissions?
    This topic first appeared in the Spiceworks Community

  • How do you create default Read/Write Permissions for more than 1 user?

    My wife and I share an iMac, but use separate User accounts for separate mail accounts, etc.
    However, we have a business where we both need to have access to the same files and both have Read/Write permissions on when one of us creates a new file/folder.
    By default new files and folders grant Read/Write to the creator of the new file/folder, and read-only to the Group "Staff" in our own accounts or "Wheel" in the /Users/Public/ folder, and read-only to Everyone.
    We are both administrators on the machine, and I know we can manually override the settings for a particular file/folder by changing the permissions, but I would like to set things up so that the Read/Write persmissions are assigned for both of us in the folder for that holds our business files.
    It is only the 2 of us on the machine, we trust each other and need to have complete access to these many files that we share. I have archiveing programs running so I can get back old versions if we need that, so I'm not worried about us overwriting the file with bad info. I'm more concerned with us having duplicates that are not up to date in our respective user accounts.
    Here is what I have tried so far:
    1. I tried to just set the persmissions of the containing folder with us both having read/write persmissions, and applied that to all containing elements.
    RESULT -> This did nothing for newly created files or folders, they still had the default permissions of Read/Write for the creating User, Read for the default Group, Read for Everyone
    2. I tried using Sandbox ( http://www.mikey-san.net/sandbox/ ) to set the inheritance of the folder using the methods laid out at http://forums.macosxhints.com/showthread.php?t=93742
    RESULT -> Still this did nothing for newly created files or folders, they still had the default permissions of Read/Write for the creating User, Read for the default Group, Read for Everyone
    3. I have set the umask to 002 ( http://support.apple.com/kb/HT2202 ) so that new files and folders have a default permission that gives the default group Read/Write permissions. This unfortunately changes the default for the entire computer, not just a give folder.
    I then had to add wife's user account to the "Staff" group because for some reason her account was not included in that. I think this is due to the fact that her account was ported into the computer when we upgraded, where as mine was created new. I read something about that somewhere, but don't recall where now. I discovered what groups we were each in by using the Terminal and typing in "groups username" where username was the user I was checking on.
    I added my wife to the "Staff" group, and both of us to the "Wheel" group using the procedures I found at
    http://discussions.apple.com/thread.jspa?messageID=8765421&#8765421
    RESULT -> I could create a new file using TextEdit and save it anywhere in my account and it would have the permissions: My Username - Read/Write, "Staff" or "Wheel" (depending on where I saved it) - Read/Write, Everyone - Read Only, as expected from the default umask.
    I could then switch over to my wife's account, open the file, edited it, and save it, but then the permissions changed to: Her Username - Read/Write, (unknown) - Read/Write, Everyone - Read Only.
    And when I switch back to my account, now I can open the file, but I can't save it with my edits.
    I'm at my wits end with this, and I can believe it is impossible to create a common folder that we can both put files in to have Read/Write permissions on like a True Shared Folder. Anyone who has used windows knows what you can do with the Shared folder in that operating system, ie. Anyone with access can do anything with those files.
    So if anyone can provide me some insight on how to accomplish what I really want to do here and help me get my system back to remove the things it seems like I have screwed up, I greatly appreciate it.
    I tried to give as detailed a description of the problem and what I have done as possible, without being to long winded, but if you need to know anything else to help me, please ask, I certainly won't be offended!
    Thanks In Advance!
    Steve

    Thanks again, V.K., for your assistance and especially for the very prompt responses.
    I was unaware that I could create a volume on the HD non-destructively using disk utility. This may then turn out to be the better solution after all, but I will have to free up space on this HD and try that.
    Also, I was obviously unaware of the special treatment of file creation by TextEdit. I have been using this to test my various settings, and so the inheritance of ACLs has probably been working properly, I just have been testing it incorrectly. URGH!
    I created a file from Word in my wife's account, and it properly inherited the permissions of the company folder: barara - Custom, steve - Custom, barara - Read/Write, admin - Read Only, Everyone - Read Only
    I tried doing the chmod commands on $TMPDIR for both of us from each of our accounts, but I still have the same behavior for TextEdit files though.
    I changed the group on your shared folder to admin from wheel as you instructed with chgrp. I had already changed the umask to 002, and I just changed it back to 022 because it didn't seem to help. But now I know my testing was faulty. I will leave it this way though because I don't think it will be necessary to have it set to 002.
    I do apparently still have a problem though, probably as a result of all the things I have tried to get this work while I was testing incorrectly with TextEdit.
    I have just discovered that the "unknown user" only appears when I create the a file from my wife's account. It happens with any file or folder I create in her account, and it exists for very old files and folders that were migrated from the old computer. i.e. new and old files and foders have permissions: barara - Read/Write, unknown user - Read Only, Everyone - Read Only
    Apparently the unknown user gets the default permissions of a group, as the umask is currently set to 022 and unknown user now gets Read Only permissions on new items, but when I had umask set to 002, the unknown user got Read/Write permissions on new items.
    I realize this is now taking this thread in a different direction, but perhaps you know what might be the cause of this and how to correct or at least know where to point me to get the answer.
    Also, do you happen to know how to remove users from groups? I added myself and my wife to the Wheel group because that kept showing up as the default group for folders in /Users/Shared
    Thanks for your help on this, I just don't know how else one can learn these little "gotchas" without assistance from people like you!
    Steve

  • Cannot launch vivado simulator 2015.1: behav/compile.bat' script "Please check that the file has the correct 'read/write/execute' permissions"

    Hi,
    I'm trying to run a verilog simulation using the vivado simulator 2015.1 on Windows 7.
    I get the following error when I attempt to launch simulation:    
    ERROR: [USF-XSim-62] 'compile' step failed with error(s) while executing 'D:/projects/axi/axi_test_system/axi_test_system.sim/sim_1/behav/compile.bat' script. Please check that the file has the correct 'read/write/execute' permissions and the Tcl console output for any other possible errors or warnings.
    The tcl console repeats the same message, "Please check that the file has the correct 'read/write/execute' permissions"
    I cannot find any problem with the permissions.  I believe that windows will always execute a .bat file.   Within the same project, I can run elaboration, synthesis and implementation without problems. 
    Any idea why the simulation compile script won't run?
    Thanks,
    Ed

    Hi,
    Thanks very much for your detailed reply. These were the right questions based upon what I told you.   
    However, I took the code home last night and ran it on my webpack 2014.2 release.   It still failed, but I got completely different error messages.   These messages correctly pointed me to an undeclared signal in my testbench. Once fixed, the compile worked and the simulator launched. 
    This morning, I fixed the signal name in my 2015.1 setup, and it also compiled and launched correctly. 
    So, the problem wasn't actually related to file permissions.  It seems like the 2015.1 error message may be broken compared to 2014.2.  
    I was running the Vivado GUI, clicking on "Simulate > Run Behavioral Simulation"
    Thanks again for your help. 
    Regards,
    Ed  
      

  • Encoding on terminal to read/write ntfs hard drive help!

    I encoded in Terminal the codes that were posted online regarding the enabling of read/write for ntfs hard drive but something went wrong during the process. Would it be possible to undo it? Would there be any code to disable it so I could at least read it? It won't even read my hard drive anymore. I think I have accidentally delete the Volumes part where it was supposed to appear.

    Difficult to say without knowing what you did more precisely. Use the terminal history command as follows:
         history > ~/Desktop/MyNightmare.txt
    to save what you got up to in a file on your desktop. Copy and paste the lines that will show us what you did. Check for, and redact as necessary, any personal information such as user names, passwords, etc. before posting.
    Also, I assume that you tried to edit your /etc/fstab file so please post the results of these terminal commands
         ls -la /etc/fstab
         cat /etc/fstab
    too.
    C.

  • Permissions of files exported from iPhoto; read/write owner-only

    Hi folks,
    When I export a set of files as JPG from iPhoto to a folder, I notice that the permissions are set to read & write for the owner only; the rest of the group and world are not allowed to see them.
    I noticed this when I exported a set of files, then burned that to DVD for someone else to have; he couldn't read the files on the DVD.
    Actually, it's even a bit weirder: 2 or 3 files (out of several dozen) are actually world readable, and when I export the original (RAW) images, these are group & world readable.
    Does anyone have any idea if I'm missing a setting or something? It's relatively easy to adjust the permissions, but seems very odd and illogical.
    Thanks,
    Evert

    Evert:
    First Control-click on one of the thumbnails in iPhoto and select Show File in the Contextual Menu. Check the file for permissions. If they are the same as the exported file then you'll have to change the permissions on the library and all files therein.
    One way to do it is to download and run BatChmod on the iPhoto Library folder with the settings shown here, putting your administrator login name, long or short, in the owner, set the group to what is already the default (often it's staff). Set the permission to for the group and others to what you want them to be and click on the Apply button. You can either type in the path to the folder or just drag the folder into that field.
    Or, you can select the library folder, type Command-i and set the permissions in the Info window clicking on the Apply to enclosed when done. (I'm running Leopard and the permissions section in the Info window are different that they were in Tiger but I think the button is Apply to enclosed).
    Do you Twango?
    TIP: For insurance against the iPhoto database corruption that many users have experienced I recommend making a backup copy of the Library6.iPhoto database file and keep it current. If problems crop up where iPhoto suddenly can't see any photos or thinks there are no photos in the library, replacing the working Library6.iPhoto file with the backup will often get the library back. By keeping it current I mean backup after each import and/or any serious editing or work on books, slideshows, calendars, cards, etc. That insures that if a problem pops up and you do need to replace the database file, you'll retain all those efforts. It doesn't take long to make the backup and it's good insurance.
    I've created an Automator workflow application (requires Tiger), iPhoto dB File Backup, that will copy the selected Library6.iPhoto file from your iPhoto Library folder to the Pictures folder, replacing any previous version of it. It's compatible with iPhoto 08 libraries and Leopard. iPhoto does not have to be closed to run the application, just idle. You can download it at Toad's Cellar. Be sure to read the Read Me pdf file.

Maybe you are looking for