On Tue, Jun 3, 2008 at 7:47 AM, Adam McDougall mcdouga9@egr.msu.edu wrote:
That will disallow permission changes to the existing folder, but if they can make new content inside (as will be required), they own it and can set the permissions on those objects. That is what I am looking to prevent.
I don't think that's true if you also enable "Inherit from Parent". Here's what we normally do for all of our CIFS shares - Set Full Control for "Storage Admins" group - Set Modify for the users that need access. - Set Inherit permissions. - If we are resetting permissions for some reason, then we also enable "Replace permission entries on all child objects..." which is a one time operation. Has been work well for us for the past 5 years,
-G