This question is, perhaps, slightly similar to this question, but the actual plan is different.
My goal is to create a "temp" share where people can off-load their data (for example, when they are getting ready to reinstall the OS or need to quickly share something with another employee).
Now, while a "temp" folder is by definition "temporary" and shouldn't be used for storing stuff long-term, I still want to maintain some security. To that end I'd like to grant my users (My.Domain\Domain Users) write access (create folders / files), and then modify / delete access only to the files / folders they, themselves, have created.
I suspect I'd need to make use of the "CREATOR OWNER" special principal. However, I feel that to restrict modify / delete capabilities, I'd need to explicitly add a deny permission to the NTFS security tab, and deny-rules, AFAIK, take precedent over allow-rules, so the CREATOR OWNER, even if granted full permission, wouldn't be able to actually make the changes.
Is what I'm trying to achieve at all possible?