Windows Server 2016: Prevent folder deletion under a namespace created by DFS

Update

Discovered that the problem is down to the permissions that are set on the NTFS volume where the DFS namespace and share are hosted as well as users in multiple groups where if a deny permission is specified in one group the users are also denied in those other groups plus deny permissions take precedence over allow permissions making this objective very difficult to achieve. The only other thing I can think of doing is specifying individual user permissions on each folder which is very time consuming as well as cumbersome, can anyone think of any better ways of achieving this task?

Kind regards,

RocknRollTim 

Edited by RocknRollTim, 30 December 2016 - 01:07 PM.

Update

I have achieved preventing upper level folders and files from being deleted apart from sub folders and files which apparently cannot be done due to the nature in which the delete permissions work preventing creation of folders and files as well as renaming of folders and files in NTFS.

• Read and write permissions are needed to access and to save folders and files
• List folder contents permission to view contents of folder as well as attributes
• Read and execute permission to access folders and to execute program files including read, write and list folder contents permissions previously mentioned
• Modify permission to have the ability to modify folders and files with the ability to delete
• Full control including all of the above including take ownership

Regards,

RocknRollTim

Edited by RocknRollTim, 01 January 2017 - 12:09 PM.

You definitely don't want to configure individual permissions per folder. That is a nightmare to manage.

Try to determine which groups of users need certain permissions on which folders, then use security groups to grant them those permissions. You can also disable or amend permission inheritance at lower levels, if you want users to be able to make changes to individual folders, but not top-level folders. But again, this makes managing permissions much more complicated.

Hi sflatechguy,

Thank you for your response, will consider your advice when implementing permissions on folders and files.

Regards,

RocknRollTim