-1

i have provided full access to some users, i.e Read,write and modify but not RDP. But they are not able to delete the files. They can delete the files only if they are added into Domain Admin group which also means that they RDP into that Particular machine. Can anyone help?

Vinay
  • 23
  • 2

1 Answers1

0

I highly suggest reading up on NTFS permissions.

You would need to give each user(or add them to a group) explicit DELETE permissions on the files and folders, along with Modify, Write, Read & Execute on the objects within the folders.(or Full Control, which will give them the ability to do anything with the files/folder). Adding those users to the Domain Admins group is a huge security risk. I would strongly consider analyzing exactly what the user needs, instead of just giving them full control on everything and the ability to really screw things up.

colealtdelete
  • 6,017
  • 2
  • 30
  • 34