On Tue, Nov 14, 2017 at 1:50 PM, Kurt Buff <[email protected]> wrote: > You need to adjust the permissions in the directory tree, and breaking > inheritance is the wrong way of doing it. > > Change the permissions at each level so that they are explicitly > defined to allow "This Folder and Files" for those who only need to > see the files in that directory, but not other subdirectories. > > Also, it seems as if your directory structure needs refactoring - it's > way too complex if you're running into these kinds of permission > problems.
Actually, this is a rare occurrence. Usually, I have a share based on department. And AD groups for each department. I just add a user to the right group, and forget about it. It's only when they want between departments, and especially only a lower level folder, that I even touch any permissions, etc. In our case, if you are a member of "Finance", you need access to any sub-folders under the main Finance departmental share. If there are sub-folders that need to be more tightly locked down, I break inheritance and assign perms individually. That doesn't happen too often.
