New
#11
Qh yes, of course... because there is no AD (I.E. your server is WIN7 not S2008). *bumps head*, I totally forgot about that! My crap excuse is that I'm travelling so I couldn't test first like I like too (i.e. My travel netbook is on XP).
So.... you can't deny the computer because there is no AD control you need to control the access locally and per user.
ZigZag understood from the start! Props there!
When the users connect, you need to have password sharing enabled (i.e. they must put in a password to enter the shared computer (they can always save this so they need not enter it next time). You now need 2 local users on the Win7 computer, e.g. call them user1 and user2 with their own respective passwords. Don't make them ADMIN users.
Note that you also need to remap the drives and use these logins and passwords for the drive mapping.
Now user1 has access to everything, so on the outside folder give them complete access (or read only as you desire, including access to the special folder inside). Repeat this action for user2. Now go to the special folder that you only want user1 to have access to. right click on it and select properties/security. On the permissions tab, have a look and write down the current permission settings (this is an important reducndancy step should something you do fail later). Now look for a tickbox to inherit parent permissions and untick this. Now give permissions only to those users that you want to access this folder. Be aware that you probably need SYSTEM and CREATOR OWNER on there.
Like all good plans, switch user to user1 on the WIN7 box and test that they can locally access what they are supposed to. Repeat with User2. Now remap the drives with the new passwords and give the passwords out to the users.
This should fix your issue.
Quote