Thank you for reply Duke5A..!!
I got the files from backup... next time I will certainly use robocopy. I was finally able to get it to work. The trick for me was to add Advanced deny to the StudentsGroup OU (delete,traverse folder/execute,write attributes). For now it seem to do what we need.
I will save the scrip for future use or reference. Thank you for your help!