Can this be done?

Windows NTFS folders

File folder1 (top level)-includes folder2(second level)
currently, everyone has modify rights to every folder.

We need to lock down the top level to only allow everyone to read only
only domain admins are able to modify on the top level folders

But, on the second level, users need to be able to modify rights.

I am testing on this now.  I took inheritance on second level folders and files.
copy the permissions.  on the folder1 (top folder), I unchecked inheritance and change everyone to 
read only.  But, no user can create folder and files on second level folder2.

Can this be done?

Thank you for your help!