windows - Setting Writable Permission only for Administrators inside PROGRAM_DATA folder -
i've been experimenting lot of headaches implementing behavior permission in windows 7. i have following directory structure (inside program_data): c:\programdata\foo\ c:\programdata\foo\test1\ c:\programdata\foo\test2\ the root folder has permission everyone. , shall because can write new files @ level of foo folder. the test1 folder has permission everyone. the test2 must have following rule: folders/files must writable administrators, , can read. rule shall applicable test2 folder itself. now, everyting works well, except case: everyone can rename test2 folder. of course, favor can renamed it, create new folder it's same name , on (an attack). is there solution? maybe strange combination of permissions?