I have a folder which contains 5 subfolders. Each subfolder has a group of 3 users which need access to each one, but should not be able to get into the others. I'm unsure of the best way to implement permissions for this. Currently, I have one OU containing
the 5 smaller groups. I have given the OU full control over the folder, and set it not to be inherited by subfolders. On each subfolder, I gave permission to only the group which needs access, and a deny on the other 4.

Is there a better way to do this?

Need to support users over the internet? click here try our remote control online beta

Hello,
on the top level configure "List folder content" and on the subfolder use security groups containing the specific users and set the permissions for them, also disable inheritance and remove not wanted groups on the folder, of course not administrators and
domain admins.
" I have given the OU full control over the folder" How have you done this? There is no option to add an OU to the SHARE or NTFS permissions, only user/computer accounts or security groups.Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog:
http://msmvps.com/blogs/mweber/


Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Need to support users over the internet? click here try our remote control online beta

Hi,
Thanks for the help! The list folder content does excatly what I need. I guess I need to do more reading on permissions in general as that seems like a fairly obvious solution to my problem.
Sorry for the confusion, what I called an OU was actually a security group which contains the smaller groups for each individual folder.

Regards,
Kevin

There is an amazing pack of free network admin tools. click here to download it