Discussion Locked

Hiding folders in windows 2003

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
This is the scenario. A shared folder from a file server contains subfolders A and B, everyone in the domain is granated read access to the shared folder, then group A gets modify access to Subfolder A, group B gets modify access to subfolder B. Person A1 that belongs to group A opens the shared folder and "sees" subfolders A and B but only gets access to A. Can windows 2003 "hide" folder B from user A1?

7 replies

by tim.doyle

Its funny you should post this since I posted virtually the exact same question a few hours ago.

Thus far I think you have to share every folder and then only allow the groups you want to see folder A into both the folder security and share permissions. I ahven't been able to test this yet, but I'll post my results in the other question entitled "Windows Server 2003 Q?".

by styl-mark

Let me know if you get any usefull sugestions. I guess what I'm trying to do is only possible with Novell, I've done it before. ThanX

by cptomlly

In short, "No, not in the manner you describe". The only way is to use a combination of shares. You'd need a share for the the Parent folder, a share for folderA, and a share for folderB. Give Group A the desired share permissions to \\server\folderA, but no permission to the other groups. Likewise, Group B should be given access to \\server\folderB, with no access to the other groups. Any users who need to access both folders should be given access to the parent folder \\server\parent. I recommend using full control share permissions on the shares for the groups that need access at the various levels. Then set your NTFS permission normally to control the access.

In this manner, you are simply using the various share to create an entry-point for the users as you desire, to "hide" the rest of the folder structure. It should be noted that the share permissions only apply when the folder is accessed through that share. For example users with access to \\server\parent are not restricted by the share permissions set on \\server\folderA or \\server\folderB, unless they access through those shares.

Hope this helps.

by styl-mark

The goal is to have only one entry point, so your suggestion, even though is true, does not resolve my problem. If you worked with Novell before you know what I'm trying to do.

ThanX any way

by cptomlly

I would assert that while I haven't solved your problem, I have provided an accurate answer to your question of "Can windows 2003 'hide' folder B from user A1". That answer is no.

See this Microsoft KB article: http://tinyurl.com/3dazb

Sorry for the bad news.

This discussion is closed to new replies.