This question has been asked here a few different ways, but I couldn’t find one that specifically addresses this for Windows 10 ACL / permissions.
In our work environment we have individual machines make backup images onto a shared folder on a Windows 10 machine that acts as a file server and only that client machine/user has access to that folder.
The concern, of course, is that if the client is ransomware attacked it could access that shared folder and encrypt / overwrite the backup files.
It would seem that using the fine grained special permissions in Windows 10 would make it possible to create a new file and store the backup, but prevent that file from being encrypted and overwritten / deleted?