In our second level school we have a Server 2008 with Active Directory where students are organised into 6 organisational units based on year of enrollment. They have access, in My Computer, to their home folder and also to an Assignments folder. Teachers also have access to the Assignments folder. I want to ensure students have read only access to the Assignments while Teachers have read/write/create.
At the moment students can delete folder/files which is a pain.