NTFS, How to grant 'List only accessible Directories"?

[WilWolitski]

I'm getting mixed up between ADS, NDS, and NTFS Permissions - HELP. How do you arrange share and folder permissions on an NT4 server, such that when a user views or lists the contents of a shared folder, they only see the folders they have access to?
i.e. E:\Groups
+ ACCT
+ HR
+ SALES

ShareName = Grp Permission = DomainUsers (RX)(RX) {Read}
Groups Folder = DomainUsers (RX)(NoAccess) {List}
ACCT Folder = GGRP_ACCT (RWDXC)(RWDXC) {Full Control}
HR Folder = GGRP_HR (RWDXC)(RWDXC) {Full Control}
SALES Folder = GGRP_SALES (RWDXC)(RWDXC) {Full Control}

net use G: \\NTS01\Grp

Now when member of SALES logs in they only see G:\SALES
[tt]Be a lateral thinker![/tt]

If you always do, what you always did​

​

[tt]Think outside the box[/tt]

You'll always get, what you always got!!​

 

[hchman]

I think I know what you want but I may be wrong. Set up Global group for a shared folder and add the users you want to have access to the folder. You can set the permissions using the shared tab in the properties dialog box of the folders. Then create a local group and add the global group to the local group. Set up rights in the local groups. Repeat this for each shared folder. You can also use file permissions but try not to mix share and file permissions it gets onfusing. Also, make sure you remove the Everyone group from the Global groups. Any one. If I am not correct let me know.

Remember to follow the AGLP rule - Create Accounts - Accounts into Global groups - Global groups into Local groups - assign permissions.

 

[WilWolitski]

You're on the right track but not correct. You're creating more work than is necessary. I know this is possible as I've done this in a NetWare 4.x environment, but can't figure out how to do it in NT. I'm trying to reduce the number of Shares to simplify administration and security.

You're VERY right about the confusion about Share permissions vs. File permissions. One of my primary complaints about NT...

Wanna confuse yourself some more... try setting this up using a W2K Pro PC to manage an NT4 server. The ADS capable W2K Pro interface offers many more attributes that NT4 is not capable of.
[tt]Be a lateral thinker![/tt]

If you always do, what you always did​

​

[tt]Think outside the box[/tt]

You'll always get, what you always got!!​

 

[hchman]

Are you trying to make the ACCT, HR and SALES subfolders of Groups? If so the only folder you have to share is Groups. On my server I have a folder set up called Home (which is shared). I have subfolders of Home (not shared) for every department. I have groups assigned to each departments folder specifying who has access to the folder and the permissions they have. Any unauthorized users are not given access. There may be another way of doing it but I try to stick to the standards. Less confusing. Let me know if you try something else and it works. X-)

 

[WilWolitski]

Now you're talkin'. I have the access permissions down pat and working acceptably, but I also want to filter out the folder they do not have permissions to so they don't even see them and/or ask about them.

It CAN be done! But it might be a difference between Novell and Microsoft (NDS vs NT4 vs ADS) [tt]Be a lateral thinker![/tt]

If you always do, what you always did​

​

[tt]Think outside the box[/tt]

You'll always get, what you always got!!​

 

[hchman]

I know that if you share a drive with $ after it the drive is not seen on the network. Not sure if it works with folders, never tried it. Anyone out there know if this works?