Deny an user the ability to move folders with AD

datchcha

Hey gang,

I have been gone from this site quite sometime, so i have to get back in the groove of things.

Question: How do I deny a user the ability to move files/folders from a network share with AD?

thanks.

sprkymrk

You do that with permissions and ACLs, not AD/GPO.

If you grant "read" permission, he can copy it which would allow him to move it somewhere he has "write/modify" permission. So you need to lock down access to the file/directory to prevent that.