We have a regular problem with network users accidentally moving or deleting folders on our file servers via Windows Explorer drag-n-drop. Finding and/or recovering the folders becomes a daily headache for users and IT staff.
On our new file server (“FS01”), we would like to set the directory permissions using some form of “best practices”.
The share on our new file server that users will map the H: drive to: \\FS01\Files
Etc, etc, etc.
The folders (00001 – 0005) are our mission critical folders. Each of these folders contain additional subfolders and files.
We would like to prevent users from moving/deleting/renaming folders at the 0001 parent folder level - but - still be able to work freely (moving/deleting/renaming objects) within the child subfolders.
Any suggestions on how best to set the Share and NTFS access permissions to meet these requirements? This should prevent users accidentally moving or deleting folders on our file servers via Windows Explore drag-n-drop.