{"id":381,"date":"2019-08-26T16:44:39","date_gmt":"2019-08-26T16:44:39","guid":{"rendered":"http:\/\/www.torontohelpdesk.ca\/blog\/?p=381"},"modified":"2019-08-26T16:44:39","modified_gmt":"2019-08-26T16:44:39","slug":"protecting-subfolders-from-deletion","status":"publish","type":"post","link":"https:\/\/www.torontohelpdesk.ca\/blog\/protecting-subfolders-from-deletion\/","title":{"rendered":"Protecting subfolders from deletion"},"content":{"rendered":"\n<p><strong>Problem:<\/strong><\/p>\n\n\n\n<p><em>(h\/t BZ)<\/em><\/p>\n\n\n\n<p>User complains about missing folders all the time, this is due to someone accidentally moving or deleting a folder. They request that only some users have the rights to delete folders.<\/p>\n\n\n\n<p><strong>Solution:<\/strong><\/p>\n\n\n\n<p>In order to protect the direct contents of the parent folder\nbut allow changes to be made to the subfolders the following steps can be done.<\/p>\n\n\n\n<p>Connect to the <strong>DC<\/strong> and open <strong>Active<\/strong> <strong>Directory<\/strong>,\ngo into your a folder and create a two new <strong>Groups<\/strong>. Name the groups and\nset <strong>Scope<\/strong> to <strong>Global<\/strong> and <strong>Type<\/strong> to <strong>Security<\/strong>. After the groups have been made, add the <strong>Users<\/strong>\nwho will be set as the folders admins, the other group will have users with\nlimited access.<\/p>\n\n\n\n<p>Open <strong>File Explorer<\/strong> and find the folder that needs to\nbe protected. Right click on the parent folder and select <strong>Properties<\/strong>. In\nthe Properties window select <strong>Security<\/strong>, and click on <strong>Advance<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"434\" height=\"462\" src=\"http:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-01.png\" alt=\"\" class=\"wp-image-382\" srcset=\"https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-01.png 434w, https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-01-282x300.png 282w\" sizes=\"auto, (max-width: 434px) 100vw, 434px\" \/><\/figure>\n\n\n\n<p>Click on <strong>Disable Inheritance<\/strong>, a popup will appear,\nclick on \u201c<strong>Remove all inherited permissions from this object<\/strong>\u201d to clear\nall security settings.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"782\" height=\"528\" src=\"http:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-02.png\" alt=\"\" class=\"wp-image-383\" srcset=\"https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-02.png 782w, https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-02-300x203.png 300w, https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-02-768x519.png 768w\" sizes=\"auto, (max-width: 782px) 100vw, 782px\" \/><\/figure>\n\n\n\n<p>Once inheritance has been removed, <strong>Add<\/strong> the group with\nadmin permissions to the folder, giving them <strong>Full control<\/strong>, click <strong>OK<\/strong>\nwhen completed.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"931\" height=\"600\" src=\"http:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-03.png\" alt=\"\" class=\"wp-image-384\" srcset=\"https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-03.png 931w, https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-03-300x193.png 300w, https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-03-768x495.png 768w\" sizes=\"auto, (max-width: 931px) 100vw, 931px\" \/><\/figure>\n\n\n\n<p>Click <strong>Add<\/strong> once more, select the group who will\nreceive the special permissions, under <strong>Applies to<\/strong> select <strong>This Folder\nOnly<\/strong>, in <strong>Advance permissions<\/strong> click on <strong>Show advance permissions<\/strong>,\nand unselect the following:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Traverse folder \/ execute file<\/strong><\/li><li><strong>Read Attribute<\/strong><\/li><li><strong>Read extended attributes<\/strong><\/li><li><strong>Read permissions<\/strong><\/li><\/ul>\n\n\n\n<p>The only thing that should be check is <strong>List folder \/ read\ndata<\/strong>, click <strong>OK<\/strong>. This gives the users the ability to see the\nsubfolders of the parent folder, but nothing else (no create, edit, copy,\ndelete, move).<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"931\" height=\"600\" src=\"http:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-04.png\" alt=\"\" class=\"wp-image-385\" srcset=\"https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-04.png 931w, https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-04-300x193.png 300w, https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-04-768x495.png 768w\" sizes=\"auto, (max-width: 931px) 100vw, 931px\" \/><\/figure>\n\n\n\n<p>Click <strong>Add<\/strong> again, select the same group, under <strong>Applies\nto<\/strong> select <strong>Subfolders and files only<\/strong>, in <strong>Advance permissions<\/strong>\nclick on <strong>Show advance permissions<\/strong>, and select <strong>Full control<\/strong> and\nunselect <strong>Delete<\/strong>, click <strong>Ok<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"931\" height=\"600\" src=\"http:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-05.png\" alt=\"\" class=\"wp-image-386\" srcset=\"https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-05.png 931w, https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-05-300x193.png 300w, https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-05-768x495.png 768w\" sizes=\"auto, (max-width: 931px) 100vw, 931px\" \/><\/figure>\n\n\n\n<p>This gives the users to permissions to create, copy, edit,\ndelete, and move the contents of the subfolder, but not the folder itself.<\/p>\n\n\n\n<p>What follows should look as such:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"781\" height=\"527\" src=\"http:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-06.png\" alt=\"\" class=\"wp-image-387\" srcset=\"https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-06.png 781w, https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-06-300x202.png 300w, https:\/\/www.torontohelpdesk.ca\/blog\/wp-content\/uploads\/2019\/08\/subfolder-protection-06-768x518.png 768w\" sizes=\"auto, (max-width: 781px) 100vw, 781px\" \/><\/figure>\n\n\n\n<p>Click <strong>OK<\/strong> to apply changes, and OK to close the\nProperties window.<\/p>\n\n\n\n<p>Now the permissions have been applied.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Problem: (h\/t BZ) User complains about missing folders all the time, this is due to someone accidentally moving or deleting a folder. They request that only some users have the rights to delete folders. Solution: In order to protect the <a class=\"more-link\" href=\"https:\/\/www.torontohelpdesk.ca\/blog\/protecting-subfolders-from-deletion\/\">Continue reading <span class=\"screen-reader-text\">  Protecting subfolders from deletion<\/span><span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[131,132,133],"class_list":["post-381","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-delete","tag-deletion","tag-subfolder"],"_links":{"self":[{"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/posts\/381","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/comments?post=381"}],"version-history":[{"count":1,"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/posts\/381\/revisions"}],"predecessor-version":[{"id":388,"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/posts\/381\/revisions\/388"}],"wp:attachment":[{"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/media?parent=381"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/categories?post=381"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.torontohelpdesk.ca\/blog\/wp-json\/wp\/v2\/tags?post=381"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}