Friday, January 28, 2011

Is there a way to prevent a file from being deleted?

Hi,

I have a file on NTFS that holds accumulated information that will take forever to recreate. I marked it as 'archive' and 'system', so that it would not be obvious to notice or mishandle, but what I really want is to put some kind of lock on it, so that deleting it would only be possible when providing a password or fulfilling some other condition.

Is there a tool that can help me? perhaps some hidden Windows feature?

thanks, Yuval =8-)

  • Just remove modify permissions from anyone but the user account that creates the file. This kind of thing is exactly what NTFS rights are for.

    Yuval : can you elaborate on this please?
    Tomalak : I'm not sure how I would elaborate on "remove modify permissions". Just right-click the file and change the permissions accordingly.
    From Tomalak
  • "accumulated information that will take forever to recreate" - the time to prepare a backup / restore procedure is right now. Don't wait until the file is somehow deleted or overwritten, or the disk fails. A proper backup strategy with proven (and tested) restore capability is a must.

    Yuval : So true... and I'm on my way to do just that :-) Still, is there a way to prevent the file from being deleted?
    Richard : +1: For testing. Without confidence it can be recovered, the backup is just hope.
    gimel : "write only" backups can be disappointing, but can help if you need a short backup time ;-)
    Tomalak : I know backups are nice and all... But how do they prevent a file from being deleted (since this is what the OP is actually asking for)?
    Eddie : A backup doesn't prevent the file from being deleted, obviously, but if a file is truly that critical, a backup is equally so.
    From gimel
  • Under NTFS you can alter the access rights for users and groups either at a folder level or at a file level.

    Right click on a file or folder and go to the security tab. You can then remove users rights for deleting / modifying a file. Ensure you leave the administrator and administrators full rights. Also, if it on a domain ensure that both the local administrator and domain administrators have full access rights.

    Keithius : Just remember that there is no way to prevent a file from being deleted by ALL users - otherwise, you'd never be able to delete the file! Access permissions are best, but if you're logged on as the user who has permission to delete the files - you WILL be able to delete them, with nothing more than the standard "are you sure" Windows prompt.
    From Toby Mills
  • If you want a full logical protection, since Deny takes precedence on Allow, File Properties > Security tab > Advanced Security Setting , Deny to Everybody the delete right on this file.

    Again, a full backup of this file is in order.

0 comments:

Post a Comment