Here is the deal. On Windows Server 2003 there is no file permission for click and drag, or move folder. You can deny the delete ability on a folder, but when your users are accidentally clicking and dragging folders to move them, what’s actually happening is that the server copies the folder first, then deletes the original folder. So if you just deny delete, clicking and dragging just copies the folder instead of moving it.
To actually prevent moving a folder, you need to prevent the deletion and the creation from occurring. So you need to deny the right to create folders. Users can still click and drag files to move them into other folders. Users can still delete and modify files. They cannot create, delete or rename folders anywhere.
So if you want to make your Windows Server 2003 File Server so that users cannot affect folders, but they can affect any change on files that they want, do the following:
- As the administrator, or any user with full rights to the folder, Right-Click the folder, and click properties
- click the security tab
- click the advanced button
- click the add button
- type in an object name. A group is a good idea, but it could be one user as well.
- change apply onto to ‘This folder and subfolders’
- click the Deny checkbox for ‘Create Folders / Append Data’
- click the Deny checkbox for ‘Delete’
- click the Deny checkbox for ‘Delete Subfolders and Files’
- click ok
- click ok
- click ok
Here’s the gotcha: You wanted to be able to allow your users to delete files. So right now the directory structure is completely locked in place, and when you accidentally click and drag a folder nothing happens. Great. What happens if a user clicks on a folder and hits the delete key? Well, the user can’t affect folders, so they all stay in place. The files in sub-folders stay in place. Files directly in the folder get deleted! Ugh.
The best solution I have for this is enable shadow copies. Now all you have to do is go into the folder, right click the background, and restore the previous version of the folder.
If you have a better solution, leave a comment or Contact Me.