I have an AD security group of accounts that I need to have access to some folders. They need to be able to traverse these folders into sub-folders, where they will be writing files. But these accounts cannot have the ability to read the files, alter the files, fiddle with the attributes, or delete the files the sub folders contain.
Is there a way to configure that? The file server is 2008r2.