We do not allow creation of root folder in BOX. Also certain folders are read only for select staff. When using BOX Drive if they try to add content to an area they only have read access, the content is listed and appears to the employee, that they uploaded it to BOX. There is a tiny red dot but to many this is not sufficient to let them know the data is not being protected. Please configure BOX drive to not allow a local creation of content within the local BOX path if they do not have editor rights at that level.