NTFS permissions in windows server 2012

how to enable permissions in following way:

Main folder name: Thecompany   ............ everybody should have access
subfolders as depts like : Finance--------------everybody should have access for listing
                                             HR --------------------everybody should have access for listing
                                             IT---------------------everybody should have access for listing
and inside subfolders there are some other subfolders example in Finance dept folder

                                            Finance
                                                    aaaa  -----------this folder should have access for everybody including fullcontrol
                                                    bbbb------------only finance people have access on this folder including fullcontrol
and so on....

how can i achieve this.
nivasnetAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

David Johnson, CD, MVPOwnerCommented:
don't give anyone full control since they can change the permissions to allow other members
thecompany  - domain users read/write/modify
thecompany\finance domain users/read/write/modify
thecompany\finance\public\ domain users/read/
tjhecompany\finance\private\   members of the finance group read/write/modify
                                                         members of the executive group read
thecompany\it-department\public   domain users read/write/modify
thecompany\it-department\private  it-staff group read/write/modify

and so forth don't forget to disable inheritance at the more secure levels

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
McKnifeCommented:
...and remember: it's not only NTFS permissions, what this is about, but also share permissions. At the share level, use everyone:modify and nothing else.
Lee W, MVPTechnology and Business Process AdvisorCommented:
If it must be that way, it must be that way, but I strongly encourage you to reconsider the layout.  In general, a SHARE should have all the same permissions - it's MUCH, MUCH easier to manage that way.

Don't create a single share called "thecompany".  Create several shares - IT-Department, HR, Finance, etc.  If you need some things to be public, fine, but not the whole thing - the public stuff, share in "Common" or something.  In my experience, it's much easier to handle things like permissions resets when you can simply right click a folder and apply rather than worry how all the sub folders might have changed.
McKnifeCommented:
Right. And to "re-collect" the shares, one should use DFS.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.