We don't want users creating folders in the root of C on Windows 7 Enterprise. Can I create a group policy to just remove Authenticated Users from the ACLs - or will this break things? If so, can I just remove Create / Append from the ACL?

Hi, It is safe to remove the Authenticated Users’ special permission on the system root. To prevent certain user to modify drive C, you just need add them to Security tab and deny them to modify the drive. For more information about permission, please refer to the following article: How to set, view, change, or remove special permissions for files and folders in Windows XP Also, you may use the scripts for this: How to use Xcacls.vbs to modify NTFS permissions More information: Preventing Students from Saving Games on the C: Drive Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. Regards, Sabrina TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, I was wondering how everything is going. If anything is unclear, please let me know. It is my pleasure to be of assistance. Regards, Sabrina TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

This worked great. Thanks. Sorry for the late reply, the forum didn't e-mail me, I had to enable that again, and hadn't realized that.

Hi, I am glad to hear that the issue was resolved : ) Have a good day! Regards, Sabrina TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.