Solved

How do I setup a user to see the top level folder, click on it and then see ONLY their approved folders?

Posted on 2014-07-23
1
151 Views
Last Modified: 2014-07-23
On server 2012 How do I setup a user to see the top level folder, click on it and then see ONLY their approved folders? What permissions do I give on the very top level for them to be able to go into the folder? Right now they need to go to \\serverA\directory$\myfolders in order for them to see myfolders. I want them just to be able to go to \\serverA\directory$ open it and see myfolders and what ever other folders they have access to.
0
Comment
Question by:jmahlmann
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 10

Accepted Solution

by:
Tim Edwards earned 500 total points
ID: 40215427
To setup your file server so that the users can only see what they have access to you will want to enable access based enumeration:

1. First you need to add the File And Storage Services role to the server and reboot the server.
Then go to File And Storage Services in System Manager.
2. Press Shares, select your shared folder, right-click and press Properties.
3.  Under Settings you will find the Enable access-based enumeration-setting.
Enable it and Apply your changes.

Link to steps:
http://heineborn.com/tech/enable-access-based-enumeration-in-windows-server-2012/

As for the hierarchy you will need to enable list or read rights at the top, then using NTFS permissions break in inheritance and apply the AD or direct permissions as per your standards. Ours is that we create a modify and a read AD Groups for each  folder and subfolder depending on the needs and security
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolve DNS query failed errors for Exchange
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question