Hi, I have one concern wih regrads to shareed files privilages. We would like to grant a user a read privileges on a sub directory (Call it Internet) without adding him to the parent one (Call it IT). \\IT\Internet We are not sure If we do that directly at ‘internet “ and he does have an authority on the parent one IT. Both of the files are shares for IT employees, We would like to limit the user access only to Internet folder.. not the whole parent IT folder.. Any clue how to do that? Raid,

It's possible since by default, all the users have "Bypass traverse checking" user right (check it in Local Security Policy). You can create a shortcut to the Internet folder, and it works. However, I rather would say the need in such a construction usually shows some misplanning of folder hierarchy.MCITP: Enterprise Administrator; MCT; Microsoft Security Trusted Advisor; CCNA

Thanks, It works.