Disable folder creation in root but not in subfolders

Question

Hello everybody, we have a shared network drive and i have already set the structure of the root folders in C:\. I want to restrict users to create a new folder or move  a file in the root directory C:\ but to be able to create, move etc in the subfolders
of c:\
How is that possible?

Answer 1

You can configure options like those from within the Advanced security settings options.
Go into the properties of C:\, Security tab and then click Advanced. By default permissions are configured for "This folder, subfolders and files", but within here you can add permissions for subsets of those.
Add a new permission for your required group with the restricted permissions you require for C:\ and set it to "This folder only". Then add another permission for the same group but this time for the less restricted permissions you want them to have elsewhere,
and set that to "Subfolders and files only".
They'll then have the higher permissions for subfolders, while allowing you to restrict what they can do in the root of c:\ (with the obvious exception of any folders which are set not to inherit their permissions from the root of C:\).