Drill down to subfolders with permissions, restrict parent access

[Boosted]

I have users that know how to map to a particular hidden share. Under this share is a subfolder I want to give read only permissions to certain users.

If I give read access to the subfolder, then users can map directly to it, but not to the root of the share. To avoid extra training and not create a new share, I want these users to be able to map a drive to the root of the share, but not read anything, except to drill down into this subfolder and then be able to read files in the subfolder only.

If I grant the "list folder contents" permission to the root of the share to these users, then they can read everything in the root. All I want them to be able to do is drill down to the subfolder.

Can this be done?

 

[LawnBoy]

Check out Access Based Enumeration. When the user maps to the parent folder, they only see subfolders that they have rights to.

http://www.microsoft.com/windowsserver2003/techinfo/overview/abe.mspx

"We must fall back upon the old axiom that when all other contingencies fail, whatever remains, however improbable, must be the truth." - Sherlock Holmes

 

[Boosted]

Thanks, I saw the ABE when I was searching.

I guess my question is still, the users still end up with read rights to the root, so I suspect even with ABE, they would still be able to see the root files if they have List folder contents permissions.

Would ABE allow me to give no rights to the the root of the share, but they could still map to it, and see nothing but the the one subfolder they do have rights to?

 

[LawnBoy]

ABE does not extend or enhance the rights scheme. It only filters out of the view what they don't have rights to. Yes I think they still could see files in the parent folder.



"We must fall back upon the old axiom that when all other contingencies fail, whatever remains, however improbable, must be the truth." - Sherlock Holmes