When a user creates a File or Folder, by default the user is set as the owner of the new object. Because the user is set as the owner they can edit the permissions witch is not desired. Is it possible to set the default owner to anything other then the user that created it? The Domain Admins or of the NetApps local administrator group would be preferable.
Setting the share permissions dosent solve the issue and it only applies to access via the share.
I solved this by defining the OWNER RIGHTS ACE with no permissions witch stopped the inherent behavior of the owner being able to reset ACL, so access is delegate only by the ACE rules witch is what i wanted.