+1. Jim has the right answer if the accessible folder is one level below. If it
is more than one level below, you either need to use "this folder only" for
each level, or "this folder and subfolders" at the top. But using the second
choice will allow them to browse through the whole tree, which might not be the
result you want. Don't forget about the advanced settings for permissions,
there's a lot of power in there. Also access-based enumeration is a very good
tool. Glad they finally figured that one out.
Wayne
From: Jim Mediger
Sent: Fri 1/16/2009 12:45 PM
To: NT System Admin Issues
Subject: RE: Folder access question
Shared Folder
Share Permissions - Full Access
NTFS Perms - List (folder only)
-àacccessible folder
NTFS Perms - Read, List (Folders and files)
Jim
From: Joe Heaton [mailto:[email protected]]
Sent: Friday, January 16, 2009 11:41 AM
To: NT System Admin Issues
Subject: RE: Folder access question
There are no deny permissions on the shared folder above the one I need them to
access. Or further up from there.
Joe Heaton
Employment Training Panel
From: James Winzenz [mailto:[email protected]]
Sent: Friday, January 16, 2009 9:21 AM
To: NT System Admin Issues
Subject: RE: Folder access question
Are you setting up the permissions exclusively using NTFS permissions, or are
you using share permissions as well on the shared folder? Share permissions
and NTFS permissions can conflict with each other, with the most restrictive
winning out. Are you denying the user access to the shared folder, or just
ensuring he/she does not have permissions? With no permissions defined on the
parent, but only on the child, this should work, as the user is allowed to
traverse a directory they do not have access to in order to access a child
directory via a link.
Thanks,
James Winzenz
Infrastructure Systems Engineer II - Security
Pulte Homes Information Services
From: Joe Heaton [mailto:[email protected]]
Sent: Friday, January 16, 2009 10:11 AM
To: NT System Admin Issues
Subject: Folder access question
I need to give a user access to a folder below a shared folder, but not access
to the shared folder itself, or any other folders below the share.
i.e
Shared Folder - No access for this user
|
-àacccessible folder - Read permissions for this user
I've done the NTFS permissions, and then I thought I could just create a
shortcut on the user's desktop, but when I try it says the folder can't be
found. So how can I do this?
Joe Heaton
AISA
Employment Training Panel
1100 J Street, 4th Floor
Sacramento, CA 95814
(916) 327-5276
[email protected]
CONFIDENTIALITY NOTICE: This email may contain confidential and privileged
material for the sole use of the intended recipient(s). Any review, use,
distribution or disclosure by others is strictly prohibited. If you have
received this communication in error, please notify the sender immediately by
email and delete the message and any file attachments from your computer.
Thank you.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
