Locking directory structure

Question

As the title suggests, I'm trying to lock the directory structure for a folder-hierarchy.

Multiple (W7) users access shared projects on a (QNAP) SMB NAS (ACL & Auth against AD). When new projects are created, a directory structure is copied from a template, and projects are (locked &) archived when done.

A problem that keeps occurring is that (more senior) staff tend to inadvertently drag & drop entire projects into each other - i.e. moving a mouse mid-drag&drop.

I've managed to use icacls prevent deletion of folders on the local disk, but this does not seem to be taking for folders on the NAS, nor does it actually prevent moving one folder into an adjacent one.

Is there a method (or tool) to lock the folder structure, so that folders cannot be moved or deleted by non-admins?

Answer 1

The answer in the Permissions

Create a group and add your users to it. Create the folder structure Put the files in the folders Set the proper write permission on the files so the group can read write and modify Make the folder structure read only, you'll need to do this on every folder Disable inherit permissions

folder options -> Security -> Advanced -> Add Type = Deny Applies to: Subfolders only Show advanced permissions will reveal create folders / append data, delete subfolders and files, change permissions and take ownership

I would do this in a test environment before modifying permissions on your production data.