stopping folders from being moved on a shared drive

I have folders on a network share that are constantly moved. Is there a way to lock down folders on a share drive so that they never can be moved?

People move a folder without knowing it and  the next day we have to look for it


The file servers are Windows Server 2012 r2
syarmushAsked:
Who is Participating?
 
MaheshArchitectCommented:
Its painful to set permissions not to delete on every folder specially if you have hundreds of folders

What you need to do is to secure root folder / main folder underneath other users folders exists or if you have departmental folders, you need to secure that folder itself and not sub folders
OR
You need to grant modify permissions (This is required in order to move / delete folder) to only specific people to avoid users from moving / deleting files folders, users should only have then read/write and append data

On folder which you want to make secure, go to advanced security properties and add required group with deny delete permission with "This folder Only" as scope, this will avoid propagating permissions on subfolders and files
0
 
Tyler BrooksNetwork and Security ConsultantCommented:
You can prevent this by making sure that they don't have delete permissions on those folders, but also make sure not to propagate the setting down or else you may have issues with the files in those folders as well, in so far as if some needs delete permissions on a subfile they will then lose that.
1
 
kenfcampCommented:
Have you tried removing the delete permissions (for the user group) ?
It should resolve the issue, just make sure you retain it for administrators

Ken
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
Mitul PrajapatiJunior IT EngineerCommented:
Is it possible for you to give access based enumeration to the shared folder so that they can only see their department folders...
0
 
Shaun VermaakTechnical Specialist/DeveloperCommented:
ABE will only hide folders that users do not have access to (they would not be able to rename it anyway)
0
 
Andrew LeniartSenior EditorCommented:
I had this exact issue years ago at the company I worked for, where staff would accidentally drag and drop folders.

The only solution I found that worked, was to replace Windows Explorer with something a little more powerful.

Directory Opus from GPSoft is a very powerful Windows Explorer replacement that allows configuration of just about anything you can think of. I still use it myself and often find it invaluable. To solve the problem, I installed it on everyone's workstation as a replacement to Windows Standard File Explorer and that allowed me to completely disable their ability to drag and drop folders. This finally fixed the problem for me.

Hope that's helpful.

Regards, Andrew
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.