NTFS Privileges - Ability to overwrite but not create files

[KM]

We have a situation where we have one AD group (admins) that needs to be able
to create (basically full control) files in a folder and a separate AD group
that should only be able to change files (overwrite) that were placed in the
folder by the first AD group. This will allow us to catalog what files are
put in the folder and then after that the user base can modify / change the
files at will. We would prefer to set the permissions on the folder level
but the amount of files is small so some or all of the permissions could be
at the file level.

We're not seeing a way for this to be done using Windows or the SDK and we
were hoping for advise?

Thanks in advance.

[John John - MVP]

Post by KM
We have a situation where we have one AD group (admins) that needs to be able
to create (basically full control) files in a folder and a separate AD group
that should only be able to change files (overwrite) that were placed in the
folder by the first AD group. This will allow us to catalog what files are
put in the folder and then after that the user base can modify / change the
files at will. We would prefer to set the permissions on the folder level
but the amount of files is small so some or all of the permissions could be
at the file level.
We're not seeing a way for this to be done using Windows or the SDK and we
were hoping for advise?
Thanks in advance.

Explicitly deny them 'Create Files/Write Data' permission in the Special
Permissions.

John