@eddiejennings said in Icacls: Granting WO access to folder:
I would make a group for the users that need to access this folder (even if it's a group with only one user).
User also needs to map two drives (unc\path1 and unc\path2) that are on a server. The folder %programdata%\liberty software is not and does not need to be shared or mapped.
User logs into the server (via RDP?), needs two drives mapped to some other locations that's not %PROGRAMDATA%\liberty software, and needs write access to %PROGRAMDATA%\liberty software on the server, correct?
No RDP in this case. Locally installed application.
Yes - agree that a GPO using a security group would be better -