Typically if i want someone to be able to create but not delete files they did not create, i just add creator/owner. however i need all domain users to view this folder but have no ability to add files or folders.
I need a second group to NOT be able to modify non-owned files, yet create new files and folders. I will also remove delete and delete sub from this second group as they should not delete files. I expect creator owner will override this for files they own, but I can deal with that risk.
the 3rd group will have modify.
how do i do this?