I think yall need to look at access based enumeration. Look for it on support.microsoft.com. I havent played with it for awhile, but I believe it meets OPs requirements.
Regards, Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP My blog: http://TheEssentialExchange.com/blogs/michael I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php From: James Winzenz [mailto:[email protected]] Sent: Friday, January 16, 2009 12:44 PM To: NT System Admin Issues Subject: RE: Folder access question I know that we do this exact thing with terminated employees user folders we move them to a new folder that only has the local administrators group granted full control, nothing else, and grant the supervisor access to the user folder, and send them a link. It works for us. Is the shortcut directly to the subfolder? Can you try with a link to the full path? Are there any spaces in the folder name or path? Thanks, James Winzenz Infrastructure Systems Engineer II - Security Pulte Homes Information Services _____ From: Joe Heaton [mailto:[email protected]] Sent: Friday, January 16, 2009 10:41 AM To: NT System Admin Issues Subject: RE: Folder access question There are no deny permissions on the shared folder above the one I need them to access. Or further up from there Joe Heaton Employment Training Panel From: James Winzenz [mailto:[email protected]] Sent: Friday, January 16, 2009 9:21 AM To: NT System Admin Issues Subject: RE: Folder access question Are you setting up the permissions exclusively using NTFS permissions, or are you using share permissions as well on the shared folder? Share permissions and NTFS permissions can conflict with each other, with the most restrictive winning out. Are you denying the user access to the shared folder, or just ensuring he/she does not have permissions? With no permissions defined on the parent, but only on the child, this should work, as the user is allowed to traverse a directory they do not have access to in order to access a child directory via a link. Thanks, James Winzenz Infrastructure Systems Engineer II - Security Pulte Homes Information Services _____ From: Joe Heaton [mailto:[email protected]] Sent: Friday, January 16, 2009 10:11 AM To: NT System Admin Issues Subject: Folder access question I need to give a user access to a folder below a shared folder, but not access to the shared folder itself, or any other folders below the share. i.e Shared Folder No access for this user | -àacccessible folder Read permissions for this user Ive done the NTFS permissions, and then I thought I could just create a shortcut on the users desktop, but when I try it says the folder cant be found. So how can I do this? Joe Heaton AISA Employment Training Panel 1100 J Street, 4th Floor Sacramento, CA 95814 (916) 327-5276 [email protected] CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by email and delete the message and any file attachments from your computer. Thank you. CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by email and delete the message and any file attachments from your computer. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
