Stop children moving folders?

[witch]

Not sure where this should go really.

Classes have a shared folder on the server containing a folder for each child. Some lovely little angel has worked out that you can move them and so folders keep disappearing - triggering a frantic search - they are usually found inside something else.

Is there any way to stop them being able to move the folder but still have access and permissions for the files/folders inside?

[Quackers]

Make the root folder so the users can only read to 'This folder only' then on each folder change the permission so that user full control of sub folders and files only. You do this on the advanced -> change permissions page of the security screen. Edited November 14, 2013 by Quackers

[witch]

So

I change the permission on the "top" folder (folder 1) so users can only read to this folder only. But then on all the folders ( folder 2) inside this I allow full control of sub folders and files only?

But that would be sub folders of folder 2, not folder 2 itself? Or am I going mad?

 

*edit

I have just looked at the folders and I do not see what you showed me. There is NO "apply to" box

I have a security tab and an edit permissions button - not a permissions tab.

Edited November 14, 2013 by witch

[Quackers]

My mistake it is the Security Tab, its not called Permissions.

 

So from the security tab on the root folder (folder 1)click the advanced , change permissions, then uncheck remove 'include inheritable permissions from this parents object'

 

Then add admins, and system to full control to full of this folder, subfolders and files.

 

Then make users read this folder only, that will allow them into it, but not modify anything.

 

Then on folder 2 make it so that the user can read the folder, but full control to subfolders and files only, so the actual folder cannot be modified just anything inside it can.

[witch]

Thanks

I think they just want folder 1 "stuck". But I cant modify the permissions for that one, can I, without removing the "inheritable permissions" bit. Having removed that - do I then have to modify every single folder in there? (eg folder 1 is class 4m and inside is a folder each for all children in the class)

Edited November 14, 2013 by witch

[Mr.Ben]

Sadly it does have to be done for each folder (our top level of Staff Share is similar to this, just adults and not small children that are the problem!) Edited November 14, 2013 by Mr.Ben

[witch]

Sadly it does have to be done for each folder (our top level of Staff Share is similoar to this, just adults and not small children that are the problem!)

 

That will take me forever!

If they would just save stuff in "My Docs" when logged on as their own class, instead of dumping everything in shared resources, it would help! I have asked them to identify which folders they would like this to apply to as each class has lots of folders on shared resources

[sted]

That will take me forever!

If they would just save stuff in "My Docs" when logged on as their own class, instead of dumping everything in shared resources, it would help! I have asked them to identify which folders they would like this to apply to as each class has lots of folders on shared resources

 

but they wont I once had a teacher if I could set their default save location (my docs) to the shared drive

[Mr.Ben]

Can you not just have a single folder for each class?

 

When I did it to the Staff Share, it also prompted a cleanup of the share, and discussion as the what folders we really needed!

[witch]

Can you not just have a single folder for each class?

 

When I did it to the Staff Share, it also prompted a cleanup of the share, and discussion as the what folders we really needed!

I have got a single folder for each class - and it is that one that needs not to move - but inside it is a folder for each child in the class that they need to be able to have full control over

[sted]

might it be quicker to deny modify access to this folder only for pupils on the ones that keep getting moved (possibly quicker than redoing shed loads of permissions)

[Arthur]

Another option would be to create a file starting with a dot, underscore or hyphen in the root of each folder you do not want to be moved. Change the permissions on that file so that students and/or staff do not have access to it. When someone accidentally drags that folder into another, Windows should either display an error message or abort the operation because it will start copying the file and then find it isn't able to.

[witch]

might it be quicker to deny modify access to this folder only for pupils on the ones that keep getting moved (possibly quicker than redoing shed loads of permissions)

 

That seems disturbingly easy but I cant do it as the ticks are greyed out unless I remove inheritable permissions and then I have to set them all up again anyway

Ive just created a folder called Test on shared res and inside are two folders called one and two. The permissions on Test are that I own it and have full control but students cant modify etc. I set up one and two so that they didnt inherit permissions, students have full control and so do I. I am network manager. I cant delete one and two and if I try and look at them the security data wont show!! I cant delete Test either but I wonder if that is set from further up

What have I done?

Edited November 14, 2013 by witch

[sted]

That seems disturbingly easy but I cant do it as the ticks are greyed out unless I remove inheritable permissions and then I have to set them all up again anyway

Ive just created a folder called Test on shared res and inside are two folders called one and two. The permissions on Test are that I own it and have full control but students cant modify etc. I set up one and two so that they didnt inherit permissions, students have full control and so do I. I am network manager. I cant delete one and two and if I try and look at them the security data wont show!! I cant delete Test either but I wonder if that is set from further up

What have I done?

 

your right just tried it and denying modify denies read etc sorry

[witch]

So what do I do now? I cant get rid of them!!! Edited November 14, 2013 by witch

[sted]

aha just found a solution that seems to work I was wrong in my previous post I didn't engage brain even given it a quick test

[witch]

Surely they would need read permissions?

[sted]

Surely they would need read permissions?

 

they have inherited that's just the deny permissions (just the way windows 8.1/svr 2012 shows them) these are additional permissions as well as their normal ones

 

http://www.edugeek.net/attachment.php?attachmentid=21511&stc=1&d=1384423991

Edited November 14, 2013 by sted

[witch]

But I thought I had to untick the inherited box? Now I'm really confused and I still cant get rid of the folders I have made

[sted]

But I thought I had to untick the inherited box? Now I'm really confused and I still cant get rid of the folders I have made

 

nope

 

 

then as above pic(s)

[witch]

I think I dont understand which folder you are talking about

Start from the top

What do I need to change on folder 1 to stop children moving it?

Having done that - what do I need to do to allow children to read write,move and delete on folders 2 and 3 INSIDE folder 1?

[sted]

assuming you structure is something like the below

 

share

------folder(must not be moved)

------------------------------------stuff they can do what they want with

 

on folder(must not be moved) you want to go to permissions advanced and add user group (pupils in my example) then select deny (AND ONLY STUFF THEY CANT DO SO LEAVE read etc blank) create file/create folders/delete) and make sure at the top it says this folder only

[kaphc]

I know this is a completely different solution to what you are looking at ... but the only school I have where this does not happen accidentally from time to time, is one where all the children have individual logins (apart from the reception class) which then maps to their own folder on the server - "My documents" redirects there as well. Otherwise, with the sensitivity of touchpads on laptops and netbooks, some folders inevitably seem to end up getting moved around!

[witch]

I have suggested invidual logins but they arent keen. Also, this issue isnt even happening on the class logon - but on some random folder the class has put on the shared resources!!

[jamesb]

If you've got PowerShell then you could try this:

 

Set up the 'root' folder with the permissions you want.

 

Set up one subfolder manually with the permissions you want.

 

Run the following in PowerShell:

 

$acl = Get-Acl -Path C:\rootfolder\subfolder

foreach ($subfolder in (Get-ChildItem -Path C:\rootfolder -Recurse | Where {$_.PSIsContainer})){
   Set-Acl -Path $subfolder.FullName -AclObject $acl
}

 

That'll set all the subfolder permissions (for all subfolders, not just the first layer) to match the one you set manually. If you only want to affect the first layer, take out the -Recurse from Get-ChildItem.