Set NTFS folder permissions

Question

When creating new file servers we always need to set up the NTFS rights manually and that takes forever...
Instead I would like to have a powershell command/script that configures the NTFS security settings on the folders.
I have two needs that hopefuly some of you allready have a solution on,
1, NTFS Settings on a homefolder share:
Users should be able to access the location of all user folders (ex:
\\server\users\). Then the user should only be able to create folder(s). Without access to any other users files or folders. The user should have have full r/w access to his/her created folder.
Below you can see my settings as it is when I created it with Windows Explorer, how can I accomplish this this with Powershell instead?
2, I need the commands to set following NTFS settings on a folder:
A List Group: I want to add a AD group that should only be able to access the folder (not any subfolder or files).
A Read Group: I want to add a AD group that should be able to read all files and subfolders in a folder.
A  Write Group: I want to add a AD group that should be able to read and write on all files/subfolders in a folder.
See sceenshot below how it looks today from Windows Explorer:

Answer 1

Hi,
First of all, thanks all for your quick answers to me..
I decided to go with
Mike Laughlin's answer. But I think I still need some more help from you all :)
This is what my script do:
I have a string that takes the computername and then remove the numbers in the end of the name to get the sitename (ex computername VEGAS001 will be VEGAS , which is the sitename)
On D:\Fileshares I have my folderstructure, here I create all department folders under the "sitename" folder (ex D:\Fileshares\Vegas\) with the script. This works fine to create...
Then the last is to set the NTFS rights on all the folders with the module Mike recomended.
Here I try to set rights on different groups, but it doesnt work with my string $sitename (ex: Domain\$sitename_L_HR_W  = Domain\VEGAS_L_HR_W)
It creates a setting in the NTFS security , but it's not the correct one (see below) , its just a none existing GUID number..
I tried to add different symbols such as + " ' between/in the AD Group name
Ex: Domain\$sitename+_L_HR_R /
Domain\$sitename+"_L_HR_R" ,
but without any success
Sometimes it didnt add the GUID above, sometimes just a long error message that I couldnt understand.
I guess for anyone with some more PowerShell skills then me will be able to fix this easy? :)
Here is my code....
#Import the PowerShell Module (PowerShellAccessControl)
Import-Module PowerShellAccessControl
# Configure sitename as an string
$sitename = $env:computername
$sitename = $sitename.Substring(0,$sitename.Length-3)
# Create folder structure
New-Item D:\Fileshares\$sitename$\DATA\Administration\IT -type directory
New-Item D:\Fileshares\$sitename$\DATA\Administration\Finance -type directory
# Configure NTFS settings on folder
Get-Item D:\Fileshares\$sitename$\DATA\Administration\IT | Add-AccessControlEntry -FolderRights Read -Principal Domain\$sitename_L_IT_R -AceType AccessAllowed -AppliesTo ChildObjects,ChildContainers,Object -Apply -Force
Get-Item D:\Fileshares\$sitename$\DATA\Administration\IT | Add-AccessControlEntry -FolderRights modify -Principal Domain\$sitename_L_IT_W -AceType AccessAllowed -AppliesTo ChildObjects,ChildContainers,Object -Apply -Force
Get-Item D:\Fileshares\$sitename$\DATA\Administration\HR | Add-AccessControlEntry -FolderRights Read -Principal Domain\$sitename_L_HR_R -AceType AccessAllowed -AppliesTo ChildObjects,ChildContainers,Object -Apply -Force
Get-Item D:\Fileshares\$sitename$\DATA\Administration\HR | Add-AccessControlEntry -FolderRights modify -Principal Domain\$sitename_L_HR_W -AceType AccessAllowed -AppliesTo ChildObjects,ChildContainers,Object -Apply -Force