Been trying something that seemed easy but apparently isn't.
I have a shared folder in a domain network. I set share permissions for everyone as read only. No other permissions are set.
Then I tab over to "security" to manage NTFS permissions. I have a local group with a few members in it. This group has read, write, modify permissions.
All users only get to the share by mapping it as a network drive.
Unfortunately it appears that all my local group members also are inheriting the more restrictive permissions from "everyone".
How can I let everyone read but limit modify to a subset I manage locally?