Dear Server Expert,

We are using windows server 2008 as the file server. currently there are some folders that need to have different access right for different users.

For example:

A parent folder named "A" has a sub folder "B", "C", and "D". this is a dept folder. however, we would like to assign certain user to be able to access only folder "C" and the sub folder below C. Since the permission is inherited from "A" folder, now those specific users has the ability to access all folders under "A". Currently i want them to access be able to access only "C" folder but they can still go into the "C" folder from "A". Once inside the "A" folder, they can see see B, C, and D folder but able to access only "C". is it possible/

Thanks.

Hi,

You can disable the inheritance by right click on folder B (and C/D) - Properties - Security - Advanced.

It will ask to "add" or "remove" when click disable inheritance. Choose Add so that all permissions are retained. Edit the permission settings which related to that user, or simply deny this account from accessing folder B and D.

Hi,

You can disable the inheritance by right click on folder B (and C/D) - Properties - Security - Advanced.

It will ask to "add" or "remove" when click disable inheritance. Choose Add so that all permissions are retained. Edit the permission settings which related to that user, or simply deny this account from accessing folder B

You have to grant the user read access to Folder A in order to get to folder C.

You could share folder C separately and give the the user access to the new share.

You could enable access based enumeration and then the user would see folder A but not B and D if he has no access rights... 

You have to grant the user read access to Folder A in order to get to folder C.

You could share folder C separately and give the the user access to the new share.

You could enable access based enumeration and then the user would see folder A but not B and D if he has no access rights... 

• Marked as answer by Henry2050 33 minutes ago

You have to grant the user read access to Folder A in order to get to folder C.

You could share folder C separately and give the the user access to the new share.

You could enable access based enumeration and then the user would see folder A but not B and D if he has no access rights... 

Hi,

Thanks for the advise. let me do some testing and get back to you.

Thanks

You have to grant the user read access to Folder A in order to get to folder C.

You could share folder C separately and give the the user access to the new share.

You could enable access based enumeration and then the user would see folder A but not B and D if he has no access rights... 

Hi,

Thanks so much. It is working now.