Hello all. I want to create a samba share which has create & read-only access. I.e. if someone copies something in (using Windows explorer or whatever), it's there forever & once created, files can't change content or name or be deleted.

How do I achieve this?

So far I've got a writeable share with "create mode = 0444; directory mode = 0555; force group = users" but files and directories can change name currently, which I don't want. Underlying share directory is owned by root:users, permissions rwxrwxr-x.

Thanks very much for your time,
Toot Toot