File permissions to stop folders being moved.

[Jobos]

The student file server is running 2012r2 and I would like to lock permissions to stop folders being moved into another folder. This is a primary and the younger years all logon as a class using the same logon.

 

Shares are mapped as N: and root is the class folder. Inside the students folder there is a folder for each student and it's these folders I want to lock as the younger students have poor mouse control. At the moment the permissions on the class folder is set to full control for staff and students of that class. I would like to keep full control for staff and limit just the students.

 

\\server\userdocs$\class1\students\studentA

\\server\userdocs$\class1\students\studentB

\\server\userdocs$\class1\students\studentC

 

\\server\userdocs$\class2\students\studentA

\\server\userdocs$\class2\students\studentB

\\server\userdocs$\class2\students\studentC

 

etc.

 

Any help appreciated.

[mavhc]

deny write access to the top level folder for pupils ad group, but only "this folder and files", not this "folder, and subfolders, and files"

[jthompson]

On each of the folders that don't want students to be able to move, go into the advanced security settings and add an entry for your students group that:

• applies to this folder only
  
• is deny rather than allow
  
• under andvanced permissions, tick only 'Delete'
  

This is in addition to whatever other ACL entry you have for your students, even if that's giving full control. The deny permission wins over the allow permission, and denying the delete action prevents them from deleting, renaming or moving the folder.

[Jobos]

Thanks both.

 

I tried both ways but either the folders can still be dropped into another students folder or the student could not save in their folder. I'll come back to this next week as I'm not here tomorrow and got loads on today.