How can you stop users from moving folders and files in a Windows 2008 share, but still allow them to create new folders, rename folders, open files and save files?
You can't without breaking permission inheritance on the folders that you don't want moved. These are the relevant permissions:
The problem is that
Depending on your directory structure, you could give only
Assume a directory structure like this:
If you set top_folder to: No inheritance,
Then they wouldn't be able to change top_folder in any way, but they could modify anything under it.