File Server - Folder Permissions "List Content"

Hi All,

I'm in the process of developing a new shared folder environment on a Windows 2003 R2 Standard Edition Box. My issue is that for some reason 'authenticated users' are able to view the sub-folders under 'Parent-Folder'.

E.G D:\Data\Shared\Parent-Folder\sub-folder\

The D:\Data\Shared folder is actual folder share and under the share permissions I have 'authenticated users' with Full Control.

Under the security permissions of D:\Data\Shared\Parent-Folder\ I have Local and Domain administrators with 'Full Control' and Authenticated Users with Read and Write permissions. Yet the authenticated users can still view the content of D:\Data\Shared\Parent-Folder\


Thanks
Andrew
LVL 2
supportemeaAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Miguel Angel Perez MuñozConnect With a Mentor Commented:
I have checked on few OS client and some Windows 7 (Vista may do too) hidden folders if user has not permissions on it, but is not a Server feature.

Permissions are same, I recommend you configure share permissions as full control and use security tab to control permissions using groups: http://en.wikipedia.org/wiki/AGDLP

***edit***
This may help you: http://blogs.technet.com/b/hugofe/archive/2010/06/21/windows-2008-access-based-enumeration-abe.aspx?Redirected=true
0
 
Patrick BogersDatacenter platform engineer LindowsCommented:
Hi andrew,

You give Authenticated Users with Read and Write permissions on D:\Data\Shared\Parent-Folder\ so logically they can read them.

What are you trying to achieve?
0
 
supportemeaAuthor Commented:
Thanks Patrick,

I'm trying to make it so that if the user/group doesn't have access to D:\Data\Shared\Parent-Folder\Sub-Folder\ then they cant see it in D:\Data\Shared\Parent-Folder\.

But if they have access to Sub-Folder1 or Sub-Folder2...etc then they can only see those two folders and not Sub-Folder

Sorry I hope I've explained it well enough.
0
 
Miguel Angel Perez MuñozCommented:
This can not be done, since the user has permissions to list (view) all items in parent-folder.
0
 
supportemeaAuthor Commented:
Thanks Drashiel, Is there a difference between Server 2008 and Server 2003 then ? Our FS running 2008 is able to do this.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.