Sharepoint OneDrive: Locking Folders

[talksr]

Hi there,

Second day back for us today. Yesterday marked the day we transitioned from an on-prem public staff shared area to one in M365. We spent the afternoon with my training the staff on how to access this and link it to their own OneDrive. Perfect, no complaints, everyone happy.

 

This morning, I have had through frantic emails stating that the area is gone and files are missing.

I have visited the Sharepoint site in question and one staff member appears to have inadvertently deleted a substantial amount of files and folders.

Not an issue, I will just restore them from the Sharepoint Recycle Bin. A good learning curve for staff anyway but moving on from this, does anyone know if there is a way to prevent deletion of folders?

 

I am the administrator user, all staff users are automatically added to the Sharepoint group as "curriculum staff" This is cagegorised from our MIS which syncs with LGfL which then syncs with M365. Curriculum staff group have "Can Edit" settings enabled. They are also enabled as "owner".

 

I would be very grateful if anyone could point me in the right direction or tell me if there is a better way of doing this.

Our old Staff Shared area was an on prem server with no backup facility due to the sheer size of all of the files. If someone accidentally deleted something, it would delete immediately and there would be no way of recovery so the OneDrive solution has already proved it's worth in less than 12 hours of being comissioned!

[psydii]

We have a site/team for each department, which limits the scope of potential damage.

 

We have several communication sites for sharing documents read only with all staff (HR, Safe Guarding, IT Helpdesk, general school documents and stuff). Owners of the information are the Owners of these sites, All Staff are visitors. The PA / Office Manager / Business manager owns the general school documents site, and manages access therein at a folder level.

 

When a document needs to be shared outside of the owners/members group of the site, then it is done limited to the specific file/folder to a suitable azuread/local ad group. Mostly these documents are transitory and end up being shared directly from the member of staff who needs to collect the data's OneDrive.