Windows Forum

Ask something
Discussion Locked

not list folders in share

0 helpful
4 replies

by -dag 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a problem where I need to, by default, NOT list all the folders in a share, but DO list them for people who should see them. I have tried folder permissions, but cannot seem to get it right.

NDS does this by default, and I would really like to think Microsoft would offer that flexibility, but am starting to have my doubts.

Good luck!

4 replies

by ewing bettles

Controlling the ability to list a folders contents is possible through file and folder security permissions, rather than share permissions. Security permissions are only available for files and folders that reside on an NTFS partition. A FAT16 or FAT32 partition can be converted to an NTFS partition through the use of the CONVERT command within a Command Prompt window (see Windows 2000 Help for details).

To setup sharing and security for a folder, right-click the folder and choose Properties from the context-sensitive menu that appears. This will open a multi-tabbed Properties window for the folder object. If the folder is on an NTFS partition, one of the tabs will be labeled Security - if this tab doesn't exist, see the above comments regarding NTFS. Using the Sharing tab, select the radio button for Share this folder and provide an appropriate Share name and (optional) comment in the description lines. The Permissions button toward the bottom of the Sharing tab should be clicked to set the appropriate Share permissions for the folder object. Share permissions are limited to Full Control, Change, or Read only for the individual users or groups that are selected. NOTE: Using the Deny setting, both in share and security permissions, takes precedence over any other explicity defined setting - setting the Deny read permission to the everyone group would disallow any read access to anyone even if the are seperately listed with allow read permissions.

by ewing bettles

(Continued-1930 character limit)
Once your Share permissions are set, choose the security tab of the file object properties screen to further define the security access permissions. There are 6 basic security attributes that can be directly defined here - Full control, Modify (RWXD), Read&Execute (RX), List Folder Contents, Read, and Write. If you choose the Advanced button towards the bottom, and then view/edit individual entries in the advanced screen, there are 13 seperate security attributes that can be modified there.

When a user accesses a file or folder through a share, Share permissions are first applied and then any security permissions that are set on the specific objects are used for further access control. The resulting access will be limited by the most restrictive permissions from both the share and security settings, with any Deny settings overriding all others.

Hope this helps, -Ewing

by -dag

Sorry, but I'm going to have to close this. I called Microsoft directly and, as I had feared, you cannot stop a user from seeing directories as you can in Netware. So much for C4 compliance :)

If you give users read permissions in a directory tosee some of the sub-folders, they will see all of the sub-folders. Sounds really lame to me, but oh well. Billy boy already made his money, why should customer satisfaction matter?

This discussion is closed to new replies.