How to disable deleting folders in root but allow subfolders/files to be created/modified?

Question

we have a Windows 7 server and I've been asked to set it up so no one can move files in the root directory except for 3 users and still allow everyone to access/create files in subdirectory.

Example:

We have a drive, X:/

We don't want people to move any folders inside X:/

But in X:/SomeFolder we want people to have full permissions to create, move, and modify files.

I got the move restriction setup by disallowing delete for subfolders in the current directory, but it restricted access on sub-sub folders as well.

Anyone have a clue on how to do this?

Answer 1

When changing the permissions to block users from moving folders, set them to apply to This Folder Only:

_{(source: winhelp.us)}

---

Assuming you have two groups, Users and Administrators, and no other permissions currently configured on X::

1. Grant Administrators Full Control, applied to This Folder Only
2. Grant Users the following permissions, applied to This Folder Only:
   • Traverse Folder
   • List Folder Contents
   • Read Attributes
   • Read Extended Attributes
   • Read Permissions
   • Create Files
   • Create Folders