How to assign ntfs permissions to access root shares (2008 R2)?

Question

Windows

Good to everyone!
2008 R2 in the domain and group group. The role of the file server. Created resource resource. Network rights for group: read and change. nfts permissions on the root of the shared directory:
CREATOR-OWNER - Special
system - Full control
Admin - Special
group - Read and execute, List content and Read
Administrators - Full control
Users - Read and execute, List content and Read

Attention, question: what hu. ..dozhnik the users of the group group when accessing the network share have the right to create directories in the root share?!

Answer 1

It is necessary to set an explicit prohibition on Write in the ntfs rights of the group group at the root shared directory.