+1 it works as advertised, and amazingly (or not) most end users think it's supposed to work that way anyhow...
From: Michael B. Smith [mailto:mich...@theessentialexchange.com] Sent: Friday, January 16, 2009 9:49 AM To: NT System Admin Issues Subject: RE: Folder access question I think y'all need to look at "access based enumeration". Look for it on support.microsoft.com. I haven't played with it for awhile, but I believe it meets OP's requirements. Regards, Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP My blog: http://TheEssentialExchange.com/blogs/michael I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php From: James Winzenz [mailto:james.winz...@pulte.com] Sent: Friday, January 16, 2009 12:44 PM To: NT System Admin Issues Subject: RE: Folder access question I know that we do this exact thing with terminated employees' user folders - we move them to a new folder that only has the local administrators group granted full control, nothing else, and grant the supervisor access to the user folder, and send them a link. It works for us. Is the shortcut directly to the subfolder? Can you try with a link to the full path? Are there any spaces in the folder name or path? Thanks, James Winzenz Infrastructure Systems Engineer II - Security Pulte Homes Information Services ________________________________ From: Joe Heaton [mailto:jhea...@etp.ca.gov] Sent: Friday, January 16, 2009 10:41 AM To: NT System Admin Issues Subject: RE: Folder access question There are no deny permissions on the shared folder above the one I need them to access. Or further up from there... Joe Heaton Employment Training Panel From: James Winzenz [mailto:james.winz...@pulte.com] Sent: Friday, January 16, 2009 9:21 AM To: NT System Admin Issues Subject: RE: Folder access question Are you setting up the permissions exclusively using NTFS permissions, or are you using share permissions as well on the shared folder? Share permissions and NTFS permissions can conflict with each other, with the most restrictive winning out. Are you denying the user access to the shared folder, or just ensuring he/she does not have permissions? With no permissions defined on the parent, but only on the child, this should work, as the user is allowed to traverse a directory they do not have access to in order to access a child directory via a link. Thanks, James Winzenz Infrastructure Systems Engineer II - Security Pulte Homes Information Services ________________________________ From: Joe Heaton [mailto:jhea...@etp.ca.gov] Sent: Friday, January 16, 2009 10:11 AM To: NT System Admin Issues Subject: Folder access question I need to give a user access to a folder below a shared folder, but not access to the shared folder itself, or any other folders below the share. i.e Shared Folder - No access for this user | --->acccessible folder - Read permissions for this user I've done the NTFS permissions, and then I thought I could just create a shortcut on the user's desktop, but when I try it says the folder can't be found. So how can I do this? Joe Heaton AISA Employment Training Panel 1100 J Street, 4th Floor Sacramento, CA 95814 (916) 327-5276 jhea...@etp.ca.gov CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by email and delete the message and any file attachments from your computer. Thank you. CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by email and delete the message and any file attachments from your computer. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
