change NTFS permissions on mapped drive

[Ob1]

i am needing to lock down/remove the create file and folder permissions on the root folder of my mapped drives. the main reason for doing this is because we keep getting errors on some of our xp client machines not being able to access the drives due to a hidden recycled.exe appearing on the root of the mapped drives. before i would navigate through the command prompt and view all files, change the attributes of the autorun.inf file that puts the recycle.exe file on the drive and then delete them both. but now i have a problem where the autorun.inf and the recycled.exe keep reappearing. i have run symantec and still have this problem so i have decided to lock down the root of all my drives to prevent this file or any of my users from putting files on the root again but to do so i will need to change the permissions on the root without effecting any sub folders or file permissions. most of my data resides on two net appliance SAN storage devices. one with 8TB and the other with 32TB of storage. the drive i am working on now has about 1.2 TB of data on it.

i think i have figured out the proper way to do it but just wanted to see if anyone else has any tips for changing these NTFS permissions.

drilling down from the parent share it appears that none of the subfolders are inheriting permissions.

on the parent folder i go into the security tab, select advanced. click add: add the user group domain users and for permissions i select everything except: full control, create file, create folders, change permissions, take ownership. for apply to i change it to this folder only (this folder is the parent shared folder). finally i make sure NOT to push it out to all child objects.

is that the proper way of doing this to change the root folders permissions without effecting any child objects permissions within that parent folder?

thanks

EDIT: on the parent folder i have the administrators group with full control, and i also have the domain users again, with modify control but on the apply onto box i change that to subfolders and files.
so if i apply these changes i will have the following for permissions on my parent folder
administrators - full
domain users - special (with create files and create folders unchecked, applying to this folder only)
domain users - modify (applying to subfolders and files)