Forum Discussion
Allow “Edit/Save/Rename Without Delete” NTFS Permission
Problem Description:
I manage shared folders using NTFS permissions. I want users to edit, save, and rename files without being able to delete them.
Currently, if “Delete” and “Delete subfolders and files” are unchecked, users cannot delete, but they also cannot save or rename files because most applications temporarily delete/rename files during saving. If delete is allowed, users can save but also delete files.
Request: Introduce an NTFS permission that allows file editing and renaming without granting delete rights, to prevent accidental data loss while maintaining normal file operations.
Observation:
This limitation is inherent in the current NTFS permission model. NTFS does not distinguish between:
Intentional deletion by user
File replacement/temporary deletion by application
As a result, administrators cannot fully protect shared folder data while still allowing normal file editing workflows.
Impact:
Prevents enterprise administrators from enforcing safe file editing without risk of accidental deletion.
Creates workarounds such as Shadow Copies or backups, but these do not prevent the deletion itself.
Suggested Improvement:
Introduce a new NTFS permission or enhanced behavior that allows:
Edit, save, rename files without granting delete rights
Deny manual deletion of files/folders by users
Maintain compatibility with standard application save workflows
Such a feature would significantly improve data protection in enterprise file shares, reduce accidental data loss, and simplify NTFS permission management.
1 Reply
There is no direct NTFS permission available to fully solve this issue. However, to reduce the risk of file deletion while still allowing editing and saving, the following alternative configuration can be applied:
Block File Deletion at the Folder Level
- Grant users Modify permission on the files.
- Explicitly deny the Delete and Delete Subfolders and Files permissions on the folder.
- Test application compatibility, especially with programs like Office or AutoCAD that temporarily delete and recreate files during save operations.
This configuration allows users to edit files while preventing deletion within the folder. However, some applications may still encounter errors if they rely on temporary file deletion during saving.
