Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can you stop users from moving folders and files in a Windows 2008 share, but still allow them to create new folders, rename folders, open files and save files?

share|improve this question

You can't without breaking permission inheritance on the folders that you don't want moved. These are the relevant permissions:

List Folders / Read Data  
Traverse Folder / Execute File
Create Files / Write Data  
Create Folders / Append Data

The problem is that Create Folders / Append Data and Create Files / Write Data is what lets you move a folder, but it's also essential to let them make new folders and data.

Depending on your directory structure, you could give only Traverse Folder / Execute File and List Folders / Read Data on the folders that you don't want moved and them give Modify (or whatever) on the children of that folder.


Assume a directory structure like this:


If you set top_folder to: No inheritance, Traverse / List for This Folder Only, Modify for All Subfolders and Files

Then they wouldn't be able to change top_folder in any way, but they could modify anything under it.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.