Hi All

This might be a real dumbo question, but I don't know how to do it - I'm
thick basically :0)

Each class in our school has their own user account as part of the
Win2k3/AD/GPO setup.

When they login, their My Docs is redirected to a folder on the server,
usual setup nothing fancy.

Inside the My Docs folder we have created individual folders for each pupil
in the class.

What I want to do is set the permissions so that the children can't rename
or delete these pupil folders, but they can do anything they want inside
these folders. It's just so that the folders stay where they are, don't
have 'Sam Boyle999999999999999999999' names, etc Anybody who works in
primary schools will know the probs.

As the pupils are classed as Domain Users and the Teachers are classed as
Teachers (user-defined??) and Domain Users, I also want it so that when the
teachers login they have full control over these folders, ie they can
rename, delete, etc.

So in essence I believe that the security window for these folders will
consist of 1 set of click boxes for domain users (ie the pupils) and one set
of click boxes for the teachers, but I don't know what to click.

Another thing to note is that the permissions on these folders currently
cascade down from the master so I believe I have to uncheck the inherit
box - correct?

Is this possible?

Thanks