NTFS Permission question

[syoo]

Is it possible to setup the NTFS Permission to do this?
- Users cannot move/delete subfolders
- Users may create/change files in the subfolders

Directory structure would look like this -

MAINFOLDER1
+ Sub1
+ file1
+ file2
+ file3
+ Sub2
+ file1
+ file2
+ file3

MAINFOLDER2
+ Sub1
+ file1
+ file2
+ file3
+ Sub2
+ file1
+ file2
+ file3

MAINFOLDER3
+ Sub1
+ file1
+ file2
+ file3
+ Sub2
+ file1
+ file2
+ file3

Basically, the problem we have is the users moving the folders around by accident.

Thanks

 

[DanMc]

Sure. Use the Advanced button on the Security Tab. Add an ACE to "Deny", "Domain Users", "Modify". Here's the important bit: Where it says "Apply Onto", set it to "This Folder Only".

Be careful when using Deny. Deny overrides any other permission. As long as Administrators are members of Domain Admins and NOT Domain Users then administrators will be able to modify the folders.

Actually, a better way to do it would be to grant limited (read only) permission to the top of the tree for "This Folder, All Subfolders and Files", grant write+modify to "Files Only". If it doesn't cascade down, you might need to grant the "files only" rights in each folder... Messy, but it sounds like it'd be worth the effort in your case.