I have 3 groups Electricalgrp, Plumbinggrp, & Payrollgrp that need access to sub-folders in a network share named Data.
Shared folder Data and sub-folders:
Data | +--Electrical +--Plumbing +--Payroll
Basically, this is what I am trying to accomplish:
- Data share restricted to Read only, don't want anyone creating files or folders in the root of the Data share.
- Electricalgrp should be able to create,delete, and modify folders and files in the Electrical folder but not be able to delete the Electrical folder.
- Plumbinggrp should be able to create,delete, and modify folders and files in the Plumbing folder but not be able to delete the Plumbing folder.
- Payrollgrp should be able to create,delete, and modify folders and files in the Payroll folder but not be able to delete the Payroll folder.
I have tried the following share permissions and NTFS security settings:
Share Permissions NTFS Security Result Data Full control,Read,Change Read Works fine
Folders NTFS Security(disabled inheritance)
Folder Group NTFS Security Result Electrical Electricalgrp Modify NO GOOD, able to delete folder Electrical Plumbinggrp Deny, Read Works, denies access to folder Electrical Payrollgrp Deny, Read Works, denies access to folder
I did the same thing to the other two folders, I just changed deny and modify to it's respective groups.
Everything works great except the part that prevent the group from deleting the main folder that they are a member of. How do I prevent that?