Set Folder permission

Posted on 2012-08-12
Last Modified: 2012-10-04
I had tried several times base on the existing same topics in the forum, but I still unable to get it done. I wanted to create a 'TEST' folder. Inside test folder there are 'A' folder and 'B' folder.
Everyone should be able to create folder/file in 'TEST' folder. 'A' folder can read/write by userA, other people can only read from 'A' folder. UserB can only access/change in folder 'B', he should not goto folder 'A'.
Pls advise me how to do this, I am confuse after some testing.
Question by:swpui
    LVL 7

    Expert Comment

    by:Casey Weaver
    Create the TEST folder. Under Security add the account group that includes all the users you want to be able to have control (such as Domain Users) or just use Everyone (not as secure). Give them all the permissions except Modify (unless you want them to be able to delete). Create folder A. Assign the user to the folder and give them the permissions (such as full control or whatever you like), then add the Everyone Group (or Domain Users, whatever your setup may be), and just tick the Read permission box (or Read and Execute if there's programs inside). Add User B, and then select the Deny box for them to be able to read/list. Go into advanced permissions and uncheck inherit permissions. Do the same when setting up User B's folder.
    LVL 4

    Accepted Solution


    A quick way if your working in a home environment is to add the "UserA" and "UserB" to the "Test" folder with read permissions.

    Select the sub folder A and remove all but administrator(s) and add UserA with read/write and administrators with Full Control. Remove all others. Highlight USERA and Administrators after selecting correct permissions and click apply.  Rinse and repeat for Sub Folder B and UserB.

    As for a network environment you might consider using security groups. The same proceess only your creating a Global Security Group and adding users to the group. The group is then applied to the Folders in the same fashion. As an example you would have 3 Security groups A top level group named TEST. Inside group TEST would be two security groups Group_A and Group_B. Inside Group_A and Group_B would be User_A and User_B in their respective groups. As a recommendation I would add an administrator(s) group to all three security groups also.

    Apply the group TEST in the same fashion as above with read permissions. Then on to the sub folders where you apply only the proper Security Group Group_A or Group_B to Sub Folder A and Sub Folder B. Make sure to highlight or select the groups in the dialog box after selecting permissions and before clicking apply.

    A user that has been individually applied permissions in an incorrect way in an Enterprise environment can potentially be given permissions not intended. And as a result may have access to folders not intended for them to view. Microsoft best practice is to use Security Groups. I know it's a bit of information.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    My purpose is to describe the basic concepts of virtual memory as implemented in a modern Windows-based operating system. I will also describe the problems inherent in older systems and how virtual memory solves them. The dark ages - before virtu…
    When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
    Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    9 Experts available now in Live!

    Get 1:1 Help Now