Windows – Setting NTFS permissions to Write, but not Read

file-permissionsntfspermissionswindows

For our Benefits Open Enrollment period, we want to setup a file share/mapped drive where a specific user account (autologon to locked down laptops for this specific purpose) can save a PDF of their enrollment options from a website they sign up on.
We don't want the user to have read permissions so they can't open other employees's enrollment files.
Then the HR Manager who does have read/write permissions can go into that folder to open and print the pdf file. After it is printed it gets deleted.

I can't figure out the right combination of Advanced permissions to allow this to happen. Can someone point me in the right direction?

UPDATE:
Thanks to EricD and Cosmic542, Robocopy is working great for this. The only caveat is that robocopy runs every minute at a minimum, and I want it to check every 5 seconds or maybe less. I found FreeFileSync through another forum, and it's companion app that gets installed beside it, "RealTimeSync". RTS is a nice little app that monitors a folder for new files/changes and runs a command. You can set how many seconds you want it idle after/before running the command. I have it set to run robocopy once every 5 seconds.
Picture: http://bit.ly/1EdItoB

Thanks all for your help!

Best Answer

Create a folder with write permissions for the user. Create a robocopy job which copys everything out of this folder every minute.

Is the only clean way for your thing.

Otherwise you can set the listup permission, read attributes and the permission to write files into a folder.

Related Question