Audit dept request

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi All

Audit dept has requested, I remove a particular group access from a number
of sub folders but this group will need to retain access at the higher
(root )level .

I was wondering what would be the best way to do this.. Should I deny
access or remove the group ? Removing the group can get trick in my opinion
since I would have to uncheck inherit . As far as I know, it's worse to mess
around with turning off inheriting

Any feedback would certainly be appreciated.

TIA


.