I have a domain on which there is a shared folder. In this folder is a subfolder in which I want to restrict user permissions. Specifically, I want to deny them permission to delete files. I only want them to be able to read, write and edit.
Is there a way to do this that will not allow users to delete files or subfolders but will still allow them to rename folders and subfolders under that object?
Sure, you'll just need to restrict permission inheritance on the folders and subfolders of the object. Set up the permissions on the folder in question the way you want them and then right-click on the folder. From there, on the Security tab, click the Advanced button, and then uncheck the box labeled "Include inheritable permissions from this object's parent."
Preventing folders from being moved
Prevent users from moving vital folders with this advice from Windows hardening expert Jonathan Hassell.
Copying files across drives
Windows hardening expert Jonathan Hassell offers a series of reasons why you might have trouble copying files across multiple drives.