Permissons Question

I want to restrict permissions to create folders on a shared folders on a
windows 2003 sever but I do not want to restrict append data

any suggestions will be appreciated


John

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> I want to restrict permissions to create folders on a shared folders on a
> windows 2003 sever but I do not want to restrict append data
>

Actually it has little to do with the SHARE (you must
use Change or Full Control permission there for this
to work.)

You will however have to find a better tool than
Explorer or Cacls -- and probably better than XCalcs
too.

This pretty much leaves SetAcl.exe, which is free from
SourceForge.net

The key: You need a tool that can separate out the directory
permissions (on the directory itself) from the file permissions
inherited BY files in that directory.

The default is that directory and the inheritable set are the
same and most people think this is unavoidable.

In fact there are (at least) three sets of permissions possible
on any directory:

1) Permissions for the directory itself
2) Permissions inherited by containers created beneath it
(i.e., subdirectories)
3) Permissions inherited by files created beneath it.

Given #2 and #3, you can even have the have the subdirectories
and files inherit from the parent differently than each other,
and differently than the parent settings.

In fact, as of Win2000 there may be as many as SIX sets
of permissions but let's keep it simple.

Oh, and one (significant but manageable) problem:

SetAcl, while free, has the most obnoxiously tedious
command line syntax of any tool I know (and I am a
command-line sort of guy <grin>)

The trick: Set some permissions and use SetAcl's dump
command to see what you get -- that and reading the
limited docs will usually make it possible to figure it
out.
--
Herb Martin