Solved

How do I setup a user to see the top level folder, click on it and then see ONLY their approved folders?

Posted on 2014-07-23
1
148 Views
Last Modified: 2014-07-23
On server 2012 How do I setup a user to see the top level folder, click on it and then see ONLY their approved folders? What permissions do I give on the very top level for them to be able to go into the folder? Right now they need to go to \\serverA\directory$\myfolders in order for them to see myfolders. I want them just to be able to go to \\serverA\directory$ open it and see myfolders and what ever other folders they have access to.
0
Comment
Question by:jmahlmann
1 Comment
 
LVL 8

Accepted Solution

by:
Tim Edwards earned 500 total points
ID: 40215427
To setup your file server so that the users can only see what they have access to you will want to enable access based enumeration:

1. First you need to add the File And Storage Services role to the server and reboot the server.
Then go to File And Storage Services in System Manager.
2. Press Shares, select your shared folder, right-click and press Properties.
3.  Under Settings you will find the Enable access-based enumeration-setting.
Enable it and Apply your changes.

Link to steps:
http://heineborn.com/tech/enable-access-based-enumeration-in-windows-server-2012/

As for the hierarchy you will need to enable list or read rights at the top, then using NTFS permissions break in inheritance and apply the AD or direct permissions as per your standards. Ours is that we create a modify and a read AD Groups for each  folder and subfolder depending on the needs and security
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SQL won't work after disabling SSL3 / TLS1 3 49
Import ProxyAddress and other fields 13 55
Network share lockout 5 19
How to use smart cards 2 17
My GPO's made for 2008 R2 servers were not allowing me to RDP into a new 2012 server by default.  That’s why I tried to allow RDP via Powershell, because I could log into a remote shell without further configuration. Below I will describe how I wen…
The article will show you how you can maintain a simple logfile of all Startup and Shutdown events on Windows servers and desktops with PowerShell. The script can be easily adapted into doing more like gracefully silencing/updating your monitoring s…
In this Micro Tutorial viewers will learn how to restore single file or folder from Bare Metal backup image of their system. Tutorial shows how to restore files and folders from system backup. Often it is not needed to restore entire system when onl…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question