How to properly set NTFS permissions on a file server?

Question

NTFS

there is a file server with folders
\\fileserver\accounting\calculation
there is an accounting group, there is a calculus user included in this group.
I want:
Users cannot rename/delete the Accounting folder.
Inside the Accounting folder, users of the Accounting group can create and delete whatever they want.
The calculus folder cannot be deleted or renamed. Users of the accounting group can look in the counting folder, but cannot make changes.
Everyone has full rights to the ball. I edit only ntfs
My actions:
I create a folder counting. Disable inheritance. I change the access rights of the accounting group to read only for this folder, its subfolders and files.
Things are good. Buhi cannot rename a folder and write to it.
I create one more rule to allow Counting to be modified for subfolders and files.
The calculin user cannot create anything in the calculus folder.
I change to allow Schalalkin to modify for this package and subfolders and files.
Now the counting user can create files in the counting folder, but can also rename the counting folder.
How to make beautifully private folders in a public resource?

Answer 1

Forbidding rights take precedence over allowing
ones. If a counter is in a group of boos, then he is forbidden in the group, he is personally forbidden - in total, he is forbidden.
So it goes.