<div>
Just add him to the permission of the folder (top level) and that permission will be inherited
</div>


<div>
He has both those things already, but still not access to all files. &nbsp;And i'm sure he hasn't been explicitly denied. &nbsp;Some of the folders may not have &quot;allow inheritable permissions from the parent to propagate.&quot;
</div>


<div>
That would cause it....if you are sure that the folder underneath are supposed to inherit, then you can force, but once you &nbsp;remove the allow inheritable permissions, it is all over my friend
</div>


<div>
The only problem with that is that &quot;authenticated users&quot; have access to the main share. &nbsp;When that is checked, all authenticated users have access to everything below. &nbsp;
</div>


<div>
Safest way to create a new group and add him to this group...this way you can add anyone else to this same group later on.<br />
<br />
Then start adding this group starting at the top and moving deeper into the tree making sure you do 'not' choose to apply settings to all subfolders.<br />
<br />
If any subfolders are configured to inherit the permissions of the parent, then they will recieve the changes you make automatically.
</div>


<div>
Yes, and remember( like what crokeefe28 says) that sharing files is a two part step:<br />
1) local security( security tab)<br />
2) network share tab<br />
<br />
For example, you can set your network share permissions to all domain users, then restrict users by limited the local security to specific group.
</div>


<div>
wired:<br />
<br />
&quot;Users&quot; (this is the main folder) in that are UserFolder1 UserFolder2 UserFolder3 etc. &nbsp;<br />
<br />
1. create group<br />
2. add him to group<br />
3. One by one add this group to the ACL and give it full control.<br />
4. Click advanced and then choose &quot;replace permission entries on all child objects ...&quot;<br />
<br />
Is this correct?<br />
<br />
So there's no way to do this automatically such that I could add him at once?<br />
<br />
The thing I don't understand is that I'm supposed to make sure, as a best practice, that group &quot;everyone&quot; has full share access to the Users directory, but then they have access to everything else, and then i had to go into each folder and remove it and then uncheck &quot;allow inheritable.&quot; &nbsp;Is this correct?<br />
<br />
Thanks.
</div>


<div>
If the subfolders of the folders you give him permission to are already set to inherit permissions from the parent folder, then he will gain permissions automatically so you should have to change &quot;every&quot; folder.
</div>


<div>
typo: rewritten to include a &quot;not&quot;<br />
If the subfolders of the folders you give him permission to are already set to inherit permissions from the parent folder, then he will gain permissions automatically so you should &quot;not&quot;have to change &quot;every&quot; folder.
</div>


<div>
This statement:<br />
&quot;The thing I don't understand is that I'm supposed to make sure, as a best practice, that group &quot;everyone&quot; has full share access to the Users directory&quot;<br />
<br />
Is talking about network share permissions which are not the same a folder security permisisons.<br />
It makes total sense to leave the parent of your user folder with access to the user &quot;share&quot; set to everyone( or better, Domain Users)...this everyone gaining access to all folders, of course, will be prevented by each folder having different security permissions. Each folder having security permissions which include each user having access to their own folder.<br />
<br />
The group your creating for the President is to allow him to look in each users folder regardless of whatever permissions are set to prevent normal users from gaining access to all the folders.<br />
<br />
First thing you need to do is to add the Presidential group to the network share giving full access.<br />
After performing this step, is to add him to the parent users folder( do NOT choose to apply changes to all subfolders). <br />
<br />
Then you &quot;have&quot; to add him to each individual user folder. Again, here, you should NOT have to choose apply changes to all subfolders as this is probably in place for the individual user folders.<br />
<br />
<br />

</div>


<div>
To clarify even more what I'm saying here:<br />
<br />
First thing you need to do is to add the Presidential group to the network share giving full access.<br />
<br />
(This is talking about the folder security permissions, NOT the share permissions:)<br />
After performing this step, is to add him to the parent users folder( do NOT choose to apply changes to all subfolders). <br />
<br />
(This is talking about the folder security permissions, NOT the share permissions:)<br />
Then you &quot;have&quot; to add him to each individual user folder. Again, here, you should NOT have to choose apply changes to all subfolders as this is probably in place for the individual user folders.<br />

</div>


<div>
<div class="content wysiwyg-content">
THere is a users directory which already has a number of permissions in place on a number of subfolders. &nbsp;I would like to give the president of the company access to every single folder and file within the shared NTFS main, without erasing the pre-existing permissions. &nbsp;What's the best way to accomplish this? &nbsp;THanks!
</div>
</div>


THere is a users directory which already has a number of permissions in place on a number of subfolders.  I would like to give the president of the company access to every single folder and file within the shared NTFS main, without erasing the pre-existing permissions.  What's the best way to accomplish this?  THanks!

Need to give a user access to all subfolders and files within an entire share - Win2k3

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

Windows Server 2003

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.