Quote:

everyone group



Sorry, but I have to disagree with this.

1. You should never give any user or group FULL rights
(unless you fully understand why you're giving those rights)
You should give MODIFY rights instead.

2. You do realize that EVERYONE, means EVERYONE even users from another system if they can some how get onto your system. Perhaps a better group would be Domain Users or at least Authenticated Users, those groups at least require that the user be trusted from your Domain or trusts there of. The guest account should be disabled, but you will find that some admins seem to ignore this. Guests are a member of the Everyone group, but not the Authenticated or Domain Users groups.

As for your desire to give permissions I'd probably use XCACLS.exe to modify a bunch of systems and assign a specific group that you can control the membership.
As in your case you don't need to worry about any foler inheritence ACL issues.

XCACLS.exe
http://www.ss64.com/nt/xcalcs.html