folder level permissions

[Netman06]

Hello,

I would like to know what is the best way to provide folder level security.

If you have the following folder structure on a share call Test.

\\jjtestserver\test

under test you have 3 more folders

test1
test2
test3

now, in folder test2 you have 10 more folders, how can you use the permissions in win 2003 server to make it were a user can see only the second folder under test2

test2
private
payroll

because I can get only read permissions, but I do not want my users to see private folder at all, but if they go to test2, only the payroll folder will show up.

Any ideas,

Thanks, Mike

 

[elmurado]

If you right click the private folder and go to sharing and security>security>advanced>uncheck allow inheritable permissions
Then go back to the security tab and change as needed to give permissions to all users who need it.
Then set the attribute to hidden for the file.
I think this is what you're asking.

 

[Netman06]

yes, i've tried that, but I know i did not explain it very well, but i need to do this at the folder level and not file. also I can not attrib it because I need the user that also need acces to this folder to see it.

basically i not to make a folder which will only show up that is under other folders that I do want some users to even be able to see.

so if you have test2
PRIVATE
payroll

I want dept users to see all folders, but if you are a other dept user you can only see the payroll folder when mapping to test2

hope this might help explain it more.

thanks for your time, posts.

Mike

 

[elmurado]

Well, as I see it, in the security tab you should be able to add a security group that you can add the different departmenst to. One dept you can allow to read etc and the other you can deny. however, you can't, afaik, make the folder hidden for some and not for others(unless it's admin groups etc).
Like this?
Dept 1; Test2\Private and Payroll
Dept 2; Test2\Payroll

If you deny the group, they can see that there is a folder called private but they won't be able to look inside it. Is that okay?