allow access only to certain folders within a share based on user

[abcbbd]

This seems like a basic concept, but I can't quite figure out how to make it happen.

In a domain environment with Win7 systems, I want to create a shared folder that all domain users have access to. However, when any domain user accesses the share, they should only be able to access certain subfolders.

For example, assume the shared folder is \\server\shareme, and it contains subfolders \aaa, \bbb, \ccc, and \ddd. Further assume that there are three domain users: user1, user2, and user3. How can I allow user1 to browse \shareme, but not open any of the subfolders; allow user2 to browse \shareme and also open any of the subfolders; allow user3 to browse \shareme but only open subfolder \aaa?

Any help much appreciated.

 

[aidage]

Do you know how to write scripts at all>?

If not, than you have to right click on the folder and apply permissions to each specified user on the machine or network. It would be easier if you had a spare computer lying around that would act as a server, but its not a necessity. The only downside is that all users on the network need to have had to at least viewed the shared folder at least once.

 

[abcbbd]

Thanks for the reply, aidage. That is my question. What permissions do I need to apply?

If I share \\server\shareme, it looks like I have to give at least read permissions to DomainUsers in order to allow them to see the share. But in this case, they have access to all subfolders and that isn't what I want.

 

[aidage]

So if you want them to see the folder but not access it, it can be a little difficult without Windows Server installed. So Let me ask a few questions.

How many users?

How many folders?

Does each user have a folder than can access and no one else cant?

 

[abcbbd]

Currently about 5 users and 10 subfolders under the shared folder. But both # of users and # of subfolders will grow over time.

And, no, it's not as simple as each user only needs access to their own personal subfolder within the shared folder. I need the ability to selectively grant access to any permutation of user/subfolder(s).

Windows Server 2008 R2 is running on the Domain Controller. Clients are Windows 7.

 

[aidage]

Ill give you a thorough walk threw in a process that works for me tomorrow. Its probably not the simplest way, but its the easiest with dealing a small amount of users. Just for a further reference, are there any 2 or more users to one group. What I mean by this are there two or more users that will have access to almost the same folders?

Will you have access to the machines in question to work on them?

 

[chev65]

Maybe this link will help.

Down at the bottom of the page it talks about using the Add button to allow for permissions for a certain user or group. Unchecking the inherit permissions button will prevent them from viewing subfolders.

Configuring Windows Server 2008 File Sharing - Techotopia