We have aPublic Sharewhich gives all users access to its folders and files. I want to restrict access to a single folder within that Share to the members of a particular Security Group in Active Directory.What is is the recommended procedure for that?Al

See here: Permissions on a file server This one is also quite good: Controlling Resource Permissions If your data is distributed among serveral servers, you can also consider DFS (Distributed file system). Distributed File System (DFS) allows administrators to group shared folders located on different servers by transparently connecting them to one or more DFS namespaces. A DFS namespace is a virtual view of shared folders in an organization. Using the DFS tools, an administrator selects which shared folders to present in the namespace, designs the hierarchy in which those folders appear, and determines the names that the shared folders show in the namespace. When a user views the namespace, the folders appear to reside on a single, high-capacity hard disk. Users can navigate the namespace without needing to know the server names or shared folders hosting the data. DFS also provides many other benefits, including fault tolerance and load-sharing capabilities, making it ideal for all types of organizations. In large organisations, with about 40 file servers or more, DFS is a must. See here for more information about DFS: How DFS Works If you want to know more, let me know. Certifications: MCSA 2003 MCSE 2003

Hi, Thanks for the post. From your description, I understand that you want to restrict access to the single shared folder to the members of a particular Security Group. We may simply perform the following steps to accomplish it: 1. Right click the shared folder and select Properties. 2. On the Sharing tab, click the Permissions button. 3. In the prompted window, you could add the particular Security Group you want to restrict and select Deny for Full Control. 4. Click OK. Hope this helps.

Hi, If you want to set up permissions, on a single folder inside a shared folder, you should use normal ACL permissions to allow only the Group you want to give permissions to. On the Single folder you want to set the permissions select properties > security. Do not use Shared permissions to give granulated permissions inside an existing shared folder.

Thanks Miles, the answers provided were fine.Many Thanks,Al

Hi Al,I am glad to hear that the information was helpful to you.Hope you will enjoy our TechNet Forum.Regards,Miles