NTFS Read\Write for Word and Excel Document.

Nachiket Chaudhari 0 Reputation points
2025-10-11T11:19:12.08+00:00

I have query regarding NTFS Permissions, If user has read and write permission, user is not able to save the word/excel document. How to resolve these? where user can edit the word/excel document but not delete it

Microsoft 365 and Office | Excel | Other | Android
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Marcin Policht 68,300 Reputation points MVP Volunteer Moderator
    2025-10-11T11:28:53.76+00:00

    Microsoft Word and Excel don't modify a file in place when you save it. Instead, they:

    1. Create a temporary file in the same folder (e.g., ~$filename.tmp or similar).
    2. Delete the original file.
    3. Rename the temporary file to the original name.

    Because of this the user needs “Delete” and “Rename” permissions on the file and the folder to save successfully. If you remove Delete permission, saving fails because Office apps can't delete the original file during the save process. To allow editing but prevent intentional deletion, you need a slightly more advanced setup.

    Option 1: Use “Modify” but Deny Delete only at the file level

    You can allow editing (via “Modify”) but deny deletion through inheritance control.

    Steps:

    1. Give Modify permission on the folder.
    2. Explicitly Deny “Delete” and “Delete subfolders and files” only on the folder, not on files.

    This way:

    • The user can save changes (Office can delete and rename temporary files).
    • The user cannot delete files manually in Explorer.

    Example using Advanced Security Settings:

    1. Right-click the folder → Properties → Security → Advanced
    2. Click Add → Choose the user or group
    3. Set:
      • Applies to: “This folder only”
      • Check Deny for:
        • Delete
        • Delete subfolders and files
      • Leave Modify / Write allowed for subfiles.

    Option 2: Use a “Shared folder” with version control or shadow copies

    If your true goal is to prevent data loss rather than stop all deletions, consider:

    • Enabling Previous Versions / Shadow Copies on the share.
    • Or use SharePoint / OneDrive which allows editing but versions every save.

    If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

    hth

    Marcin


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.