Windows 10: NTFS permissions

Windows 10, Windows 7 - probably all Window versions.


I work in a highly regulated area and want to just save data to a Windows folder/directory that does not allow (for data integrity purposes) users to delete or modify data stored within the directory.


Windows saving operates by the following:


When File/Save or File/Save As is manually selected first Windows creates a temporary file that needs to be automatically deleted before save can occur. Thus all users must have delete capabilities in order for temp file to be deleted and save to occur.


This means that never will data that needs to be manually saved ever be able to be protected from unauthorized changes.


Is this really how MS Windows operates.


Use of Deny permissions doesn't resolve the issue either.

:)

 

xp ntfs permissions erased - help!

NEVER, ever, remove FULL CONTROL permissions in the Access Control Lists/rights priveleges from:

• Administators Group

• YOUR local Administrator User

• SYSTEM

on NTFS rights on your disks (via Explorer.exe rightclick properties menu, security tab) that use that filesystem, OR in the REGISTRY either, via rightclick on HIVES/KEYS permissions popup menu options...

(Sure way to lock yourself out, period, & I have done it myself early on w/ NTFS filesystems &/or the Registry before... only way to learn sometimes, is making mistakes!)

* Keep this in mind, those of you that start experimenting w/ security @ these 2 levels!

APK

P.S.=> Leaving them @ FULL POWER, in both areas, usually 9/10 times allows you to get back into your rig (logging on as your LOCAL ADMINISTRATOR USER, to fix it), & make alterations to rights/acl's as needed, to "get it right", eventually... especially when you're still learning/experimenting! apk

 

Which permissions override when using Folder permissions and NTFS permissions?

Which permissions override when using Folder permissions and NTFS permissions?

 

Which permissions override when using Folder permissions and NTFS permissions?

I teach this all the time.

The way it works is the most restrictive applies when combining share and NTFS permissions.

What that means is if you share a folder as read and then you set NTFS permissions as read and write you are only going to get read. Because it is the most restrictive when combined.

So basically set your share permissions for your group as full control then use NTFS permissions to create the restrictions.

So if you want a group to be able to read and write but not delete then set share as full control from that group. Then go to NTFS permissions and set explicit permissions for that group to only read and write.

Let me know if you need further clarification.