Cannot rename folders

Question

_{Wednesday, December 11, 2019 7:54 AM}

Hi,

i noticed some of my colleagues can first modify some folder (hosted in a WS2012) using W7 but then, maybe after 3 or 4 name change or movement, they receive error. It seems someone has the folder in use.

So i try by mylself, i'm administrator, and i succeed, while they still cannot.

The folder is shared to "Everyone" (Change and Read) both in Sharing and in Security.

Administrators also have "Full Control" in Sharing.

All replies (6)

_{Thursday, December 12, 2019 9:16 PM ✅Answered}

It depends. The share permissions act as a filter to the file permissions. So if the share has "everyone:read" and the files have "administrators:full", then admins will only be able to read the files when they access them through the share.

For example: we used to have a web site where we authenticated the users and then allowed them to upload files. So we had to grant "everyone:modify" on the upload folder (for access from IIS). Some users had a need to read the files through a network share. But we did not want them to update the files through the share because we wanted to track updates through the web site. So on the share we put "everyone:read". That stopped users from updating the files, even though the file security granted them update access.

If you don't have any special security requirements, just grant "everyone:full" or "authenticated users:full" on the share permissions. And then use the file security to manage access.    

_{Thursday, December 12, 2019 9:18 PM ✅Answered}

Hi,

You should always control the permissions with the NTFS (Security) permissions, not the sharing one.

If you want to add the users to be able to delete subfolders and files do as follows:

1. Right-click the folder in question then select Properties.

2. Go to the Security tab and click on Advanced.

3. Select the group / user that should be modified then click on Edit.

4. Click on Show advanced permissions.

5. Check the box "Delete subfolders and files" and then click OK twice.

Best regards,
Leon

Blog: https://thesystemcenterblog.com LinkedIn:

_{Wednesday, December 11, 2019 4:32 PM}

RDP to the server and download the Handle utility. /en-us/sysinternals/downloads/handle

Then open an admin command prompt and see if a workstation or server process references the folder.

net file | findstr -i partofyourfoldername
handle | findstr -i partofyourfoldername

Use the Effective Access tab to check permissions for a user to see if somehow those were changed. 

_{Thursday, December 12, 2019 3:07 PM}

Hi,

Thanks for sharing this trick.

i can see this picture:



This user cannot delete subfolders and files. Where can i change those parametes?

_{Thursday, December 12, 2019 5:06 PM}

Where can i change those parametes?

In the Sharing tab, select Advanced Sharing, and then click on permissions. 

Set file permissions in the Security tab. You may need to select the Advanced button if you have set special permissions. 

Start with the root folder of the share. Analyze those permissions first. 

_{Thursday, December 12, 2019 8:23 PM}

2 different kind of permission? is it more suitable to work with the one in sharing tab or into the security one?