Hi I got a problem that when users aren't alowed into a folder. they can just copy it to a folder they do have access to and see the content like that. the only way i've managed to fix it is to hide the folder, but then the other user must type the complete folder path wich isn't very convenient structure: folder: everyone READ, group_it FULL CONTROL|| subfolder1: group_it FULL CONTROL - subfolder2: everyone: MODIFY, group_it FULL CONTROL so people can just copy subfolder1 to subfolder2 and gives them permission to view all content of subfolder1 Any idea's?

You have to deny them the Read permission. I see that Everyone group have Read permission so you have to delete it. Users that are able to read the content of a folder are able to copy its content to another one. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator

it doens't really fix my problem: example: F:\Test (read: groupA + groupB) ----New Folder (modify groupA) ----Steven (modify GroupB) in Folder "Test", both groupA and GroupB must have read access in order to get to the "New Folder" and "Steven" without knowing the full path this means both groups can see all folders, and for that they can copy it to they folder where they got modify What i want is that either each group only sees their own folder, so they can't click on the folder to copy it, or not being able to copy the folder

Hi Steven, Thank you for your post. Access-based enumeration could hide files and folders that users do not have permission to access. Please configure DFS and ABE on your server following KB907458 (for Windows 2003) or KB961658 (for Windows 2008) If there are more inquiries on this issue, please feel free to let us know.Regards, Rick Tan