Solved

How do I setup a user to see the top level folder, click on it and then see ONLY their approved folders?

Posted on 2014-07-23
1
149 Views
Last Modified: 2014-07-23
On server 2012 How do I setup a user to see the top level folder, click on it and then see ONLY their approved folders? What permissions do I give on the very top level for them to be able to go into the folder? Right now they need to go to \\serverA\directory$\myfolders in order for them to see myfolders. I want them just to be able to go to \\serverA\directory$ open it and see myfolders and what ever other folders they have access to.
0
Comment
Question by:jmahlmann
1 Comment
 
LVL 9

Accepted Solution

by:
Tim Edwards earned 500 total points
ID: 40215427
To setup your file server so that the users can only see what they have access to you will want to enable access based enumeration:

1. First you need to add the File And Storage Services role to the server and reboot the server.
Then go to File And Storage Services in System Manager.
2. Press Shares, select your shared folder, right-click and press Properties.
3.  Under Settings you will find the Enable access-based enumeration-setting.
Enable it and Apply your changes.

Link to steps:
http://heineborn.com/tech/enable-access-based-enumeration-in-windows-server-2012/

As for the hierarchy you will need to enable list or read rights at the top, then using NTFS permissions break in inheritance and apply the AD or direct permissions as per your standards. Ours is that we create a modify and a read AD Groups for each  folder and subfolder depending on the needs and security
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Every now and then, Microsoft does something that totally impresses me. It doesn't happen often, but in this case I must say I am thoroughly impressed with Windows Server Backup. One of the long time issues with Windows Backup has been the ability t…
I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question