prevent domain users from deleting folders