Basic ICACLS Usage

This command will prevent a user group creating additional folders in the main folder, but allow creation of files and folders in the existing subfolders

ro = read only
rwm = read, write and modify

• Main_Folder\ (ro)
• sub_folder_1\ (rwm)
• folder_1.1\ (rwm)
• sub_folder_2\ (rwm)
• sub_folder_3\ (rwm)

cd main_folder

icacls * /grant "domain\user_group":(OI)(CI)(M)