Suppose I had one folder in the root of C: on a domain controller (server 2012 std) that I want everybody (domain users) to have full control over except 2 sub-folders that I only want certain users ...

You're an administrator in a large company—a very large company. You're responsible for a Windows 2000 Active Directory forest made up of several domains, with a total user count well in excess of 100 ...

So I do the web work for a client, another person handles SEO (not sure why) and a third is new and handles their internal network, including Exchange. They have an external web server (shared linux ...