Is there an option to remove access rights assigned to a specific domain account in workflow?  Here's my scenario.  When a case is opened, the workflow runs and assigns specific access rights to the folder.  When the case closes, permissions for that domain account should be changed to read-only.  However, it should not affect inherited rights and other explicitly granted rights.  

I have already tried the "remove all rights" activity.  When doing so, although I specify the domain account, it automatically selects the check "Inherit rights from parent when not specified above."  It wipes the entire access right to vanilla for that folder.  It shouldn't be that way because certain inherited rights such as admin rights and other trustees that are added to the folder on a case by case basis should remain.