Setup question on Home Directories on Windows 2008 R2 ADDS

Windows 2008 R2 ADDS
Windows XP SP3 Clients

I have setup homedirs on a new domain (two shares ABC and XYZ)
Share - Admin (Full), AuthUsers and required NTFS permissions
My Documents is redirected to homeshare\homepath
all works fine

I now have a request....
 that a group of users would need full access to all homedirs in share XYZ
and one user will need full access to one folder in the ABC share

What is the best way (details please) to do this? also, it should not break the privacy permissions for all users. (with the exception of the group given permissions) I know I can do this by setup a group with appropriate share and ntfs permissions, but can this be done after the homedirs have been setup?
LVL 14
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

If they are supposed to see all sub folders within that folder    setup a group and give it Inherited Permissions downwards  

no need to do anything to the homefolders and only members of the group you created will see all
all other users will only see their folder

Set, view, change, or remove special permissions for files and folders
To set, view, change, or remove special permissions for files and folders:
1.      Click Start, click My Computer, and then locate the file or folder where you want to set special permissions.
2.      Right-click the file or folder, click Properties, and then click the Security tab.
3.      Click Advanced, and then use one of the following steps:
o      To set special permissions for an additional group or user, click Add, and then in Name box, type the name of the user or group, and then click OK.
o      To view or change special permissions for an existing group or user, click the name of the group or user, and then click Edit.
o      To remove an existing group or user and the special permissions, click the name of the group or user, and then click Remove. If the Remove button is unavailable, click to clear the Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here check box, click Remove, and then skip steps 4 and 5.
4.      In the Permissions box, click to select or click to clear the appropriate Allow or Deny check box.
5.      In the Apply onto box, click the folders or subfolders where you want these permissions applied.
6.      To configure security so that the subfolders and files do not inherit these permissions, click to clear the Apply these permissions to objects and/or containers within this container only check box.
7.      Click OK two times, and then click OK in the Advanced Security Settings for FolderName box, where FolderName is the folder name.

See full explanation here

Carpe Diem

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
BigBadWolf_000Author Commented:
Did not work out as described in suggested solution
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.