I'm kind of new to AD and I'm trying to figure out how to implement this. We've got a request to provide access to our network shares such that the specific users can see the complete file and folder ...

Could I pick peoples brains on how they implement NTFS permissions so that for a shared folder, a group can't create random folders or files in the base of that folder, but can read/modify any files ...