I have a folder which contains 5 subfolders. Each subfolder has a group of 3 users which need access to each one, but should not be able to get into the others. I'm unsure of the best way to implement permissions for this. Currently, I have one OU containing the 5 smaller groups. I have given the OU full control over the folder, and set it not to be inherited by subfolders. On each subfolder, I gave permission to only the group which needs access, and a deny on the other 4. Is there a better way to do this?

Hello, on the top level configure "List folder content" and on the subfolder use security groups containing the specific users and set the permissions for them, also disable inheritance and remove not wanted groups on the folder, of course not administrators and domain admins. " I have given the OU full control over the folder" How have you done this? There is no option to add an OU to the SHARE or NTFS permissions, only user/computer accounts or security groups.Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hi, Thanks for the help! The list folder content does excatly what I need. I guess I need to do more reading on permissions in general as that seems like a fairly obvious solution to my problem. Sorry for the confusion, what I called an OU was actually a security group which contains the smaller groups for each individual folder. Regards, Kevin