Locking down top level folder permissions

We run Windows 2003 on our file servers. We are continually having a problem
where top level folders on our shared drive are being accidently moved. I am
looking for an easy way to lock down the top level folders with NTFS
permissions. When I set the permissions on the top level folders, the
permission are inherited by all subfolders and files, which we don't want.
What is the easiest way to lockdown the top level folders, but not the
subfolders and files.

Phillip
Mon Feb 06 16:07:41 CST 2006

Either rearange the folder structure or turn off inheritance in the
folder(s) where you don't want it to occur.

top folder
level1 folderA <-------------------turn off inheritance here
level2 folderA, folderB, folderC <--inheritance on, inherits
from level 1
level 3 folderA <----inheritance on, inherits from
level 1 & 2


--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"Tmiber" <Tmiber@discussions.microsoft.com> wrote in message
news:2BF9CF3B-CFD1-4464-9683-A0D46210D3E7@microsoft.com...
> We run Windows 2003 on our file servers. We are continually having a
problem
> where top level folders on our shared drive are being accidently moved. I
am
> looking for an easy way to lock down the top level folders with NTFS
> permissions. When I set the permissions on the top level folders, the
> permission are inherited by all subfolders and files, which we don't want.
> What is the easiest way to lockdown the top level folders, but not the
> subfolders and files.

Roger
Mon Feb 06 23:29:26 CST 2006

Use the Advanced button in the NTFS permissions dialog.
In the advanced view, after you highlight an ACE you are then
able to set its scope of application.
What you want to do is to grant List or List and Read for This folder.
You would then set other permissions for Subfolders and files.

"Tmiber" <Tmiber@discussions.microsoft.com> wrote in message
news:2BF9CF3B-CFD1-4464-9683-A0D46210D3E7@microsoft.com...
> We run Windows 2003 on our file servers. We are continually having a
> problem
> where top level folders on our shared drive are being accidently moved. I
> am
> looking for an easy way to lock down the top level folders with NTFS
> permissions. When I set the permissions on the top level folders, the
> permission are inherited by all subfolders and files, which we don't want.
> What is the easiest way to lockdown the top level folders, but not the
> subfolders and files.