Folder rights management: accidental move of folders

[mhatga]

Hello,

because it happens now and then that a user accidentally moves a "top"-folder, I am searching a way to prevent this.

A typical folder tree would be:

NSS-Volume--Department-Folder--Project-Folder--Sub-Folder

I want to prevent movements of Project-Folders, these are the root folders of the department (like F:\Project-Folder).

At the moment, rights (RWCEMF) are set to the Department-Folder and they are inherited down to Sub-Folders. Sub-Folders shall be deleteable.

Now, if I break inheritance for Erasing on the Department-Folder I would have to set Trustees on... Project-Folder? No, I would gain nothing.
Instead, I would have to set Trustees on every Sub-Folder in every Project-Folder. These are a lot of folders and a very dynamic number... I would have to create a cronjob script for that.

So, isn't there a better way to protect Project-Folders?

Thanks

Michael

[ketter]

On Fri, 01 May 2015 12:06:01 GMT, profgerber
<profgerber@no-mx.forums.microfocus.com> wrote:

>
>Hello,
>
>because it happens now and then that a user accidentally moves a
>"top"-folder, I am searching a way to prevent this.
>
>A typical folder tree would be:
>
>NSS-Volume--Department-Folder--Project-Folder--Sub-Folder
>
>I want to prevent movements of Project-Folders, these are the root
>folders of the department (like F:\Project-Folder).
>
>At the moment, rights (RWCEMF) are set to the Department-Folder and they
>are inherited down to Sub-Folders. Sub-Folders shall be deleteable.
>
>Now, if I break inheritance for Erasing on the Department-Folder I would
>have to set Trustees on... Project-Folder? No, I would gain nothing.
>Instead, I would have to set Trustees on every Sub-Folder in every
>Project-Folder. These are a lot of folders and a very dynamic number...
>I would have to create a cronjob script for that.
>
>So, isn't there a better way to protect Project-Folders?

Michael,

If you're just dealing with users accidentally moving folders, it
might be easier to modify their PC rather than dealing with folder
rights. We had users accidentally dragging files without realizing
it. Bumping the following reg setting solved it. (I pushed it out
with ZCM.)

[HKEY_CURRENT_USER\Control Panel\Desktop]
"DragHeight"="20"
"DragWidth"="20"

They default to 4.

Ken

[mhatga]

ketter;2392676 wrote:


Michael,

If you're just dealing with users accidentally moving folders, it
might be easier to modify their PC rather than dealing with folder
rights. We had users accidentally dragging files without realizing
it. Bumping the following reg setting solved it. (I pushed it out
with ZCM.)

[HKEY_CURRENT_USER\Control Panel\Desktop]
"DragHeight"="20"
"DragWidth"="20"

They default to 4.

Ken

You got it, that's the point. Good idea.

Thanks!

Michael

[ketter]

On Sat, 02 May 2015 11:06:01 GMT, profgerber
<profgerber@no-mx.forums.microfocus.com> wrote:

>
>ketter;2392676 Wrote:
>>
>>
>> Michael,
>>
>> If you're just dealing with users accidentally moving folders, it
>> might be easier to modify their PC rather than dealing with folder
>> rights. We had users accidentally dragging files without realizing
>> it. Bumping the following reg setting solved it. (I pushed it out
>> with ZCM.)
>>
>> [HKEY_CURRENT_USER\Control Panel\Desktop]
>> "DragHeight"="20"
>> "DragWidth"="20"
>>
>> They default to 4.
>>
>> Ken
>
>You got it, that's the point. Good idea.
>
>Thanks!

Michael,

I was looking at the same problem you had and either dealing with a
manual right management nightmare or some type of scripting. But
since I made this registry change, the problem has essentially
disappeared.

Ken

[mmccaffe1]

Set the Rename Inhibit and Delete Inhibit on the core folders that you do not want users to be able to modify. Rename Inhibit will stop anyone from being able to move the folder and delete inhibit will stop the accidental deletion of the folder. You do not have to change trustee rights.

-Marty-