I need to allow Read permissions but deny Write permissions on this storage drive, but I seemingly can't, using the permissions dialogue. How do I go about this? Running Windows Server 2012 R2.

enter image description here

  • I believe Everyone includes CreatorOwner, and just about all groups, so any deny on it is inadvisable. There is almost always a better way to handle things than a Deny, and the larger the construct you deny on (in this case not a group, but a metagroup) the less its a good idea. perhaps this is what you want: superuser.com/questions/868399/… – Frank Thomas Jul 17 '18 at 1:49
  • If you haven’t allowed change permissions then it is already implicitly denied. You can’t deny something they don’t have. Lesser permissions are always included in the greater permissions. Also you are using share permissions which is almost never used. Instead you should be using the more flexible NTFS permissions under the security tab. You are violating best practices in two ways. Using share permissions and using denies. – Appleoddity Jul 17 '18 at 3:31

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.