I have a shared folder for which I have given full access to a user group who will access it from across the network. However, I do not want this specific group to have write permissions to the entire share, I only want them to have modify permissions for a certain folder within this shared folder. IE: 'shares folder' (root share directory) (full control) - PUPILSRO(the share itself, only want them to have read access) - PUPILS folder within the share to which I want them to have modify). When I grant them read rights only at the share level, this stops them from being able to write to the pupils folder (most restrictive). Si I grant them the change or full control share permission at the share level, but when try to restrict them via NTFS permissions by giving them read and execute permissions they are still able to write everywhere within the pupilsro folder. Any advice. I am sorry if this is confusing, it's quite a hard one to explain.

uncheck inheritance on the folder

Thanks, the answer was spot on, luckily for me I figured this out just in time. Thanks again