DFS root folder permissions assistance

Hi All

I have a 2008 R2 primary fileserver on a large Domain, there is a DFS Share on there called Groups. Within that share are a number of department folders.

Permissions are all working ok, with individual depaertments only having access to their own shared folders within the DFS share.

The only issue i am having is that users are able to create folders at the root of the DFS share themselves!

So the DFS share is Domain\Groups

Domain\Groups contains folders from fileserver\Accounts$, fileserver\Projects$ etc.

Users have a T: drive mapped to Domain\Groups, they can see T:\Accounts and T:\Projects but they can create folders in the root of the DFS, for example T:\new folder

I can not see a way of setting permissions on the DFS share, to stop them creating folders themselves. What am I missing? Have I set this up in the wrong way?

Any help, advice, assistance gratefuly received!