Could I pick peoples brains on how they implement NTFS permissions so that for a shared folder, a group can't create random folders or files in the base of that folder, but can read/modify any files ...

EDIT: I was not clear below... I want to set NTFS permissions so that users can create folders but not append file data. The two seem to be linked in the advanced NTFS permissions. Greetings Arsians!