I restarted ssh after each attempt. In both cases when I upload a file with the SFTP user it gets 644 permissions. I am not trying to chroot the user. OK so I think I understand what is going on. The ...
Disclaimer: I only understand how NTFS ACLs work. Say you have users with home directories, all users share the same primary group, Apache is serving public_html (presume Apache needs 'other' ...