Mapped drive share folder

i have a folder embedded about 4 levels deep I need to give access to a user however I dont want the user to have access to any folders above it.
dimar54Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dimar54Author Commented:
the folder is on a mapped drive
0
Chris HInfrastructure ManagerCommented:
Create a second share for just that folder.  It will be accessed by going to "\\mycomputer\myshare"

The user will be oblivious to any folders beneath.  If I'm going about this backwards from your explanations, you can implicitly set upward folders to "deny" on that user and they will stranded in just that folder.
0
Chris HInfrastructure ManagerCommented:
Then, if you want to bind a drive letter to it, net use \\mycomputer\myshare z:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

chuck-williamsCommented:
you will need to shortcut and map a drive to the exact folder they need and then only give them permission to that folder. That should be it.

Like map a drive x: to server\share\folder\folder2\folder3
0
ZorniacCommented:
I am not a big fan of nested shares.  Personally when we have this happen, I provide traverse attribute from root of share
give traverse folder / execute file permissions to the root of the share and all parent folders of the subfolder you wish to grant access to.   I then use GPO to push shortcut to user desktop
0
CFB_SurfgoddessIT ManagerCommented:
One thing you can do is go into the folder properties of that folder and turn inheritance off.   This is under the advanced button on the security tab of the folder.  then you can assign that users' security group to that folder only.  You may need to have the same security group have permission to traverse the upper folders.

I would recommend that you create a security group for this, even if it is just one user. that way you will always have the settings and if a new user needs the same access you can simply add them to the security group.

The two images are stock XP images but should give you an idea.
Advanced security settings for foldersDetailed Security Settings
0
ZorniacCommented:
CFB_Surfgoddess is correct, you will need to add the group (and that is the best way to provision these perms) to the root to give traverse perm down to the desired target.
0
tigermattCommented:
One thing you can do is go into the folder properties of that folder and turn inheritance off.   This is under the advanced button on the security tab of the folder.  then you can assign that users' security group to that folder only.  You may need to have the same security group have permission to traverse the upper folders.
No need to disable inheritance to add additional security ACLs to a subfolder. You can still add explicit ACLs to directories which also inherit ACLs from their parents; just be sure to understand the precedence order of the various types of permissions, i.e. Deny (Inherited), Deny (Explicit), Allow (Inherited), Allow (Explicit).
0
Chris HInfrastructure ManagerCommented:
If you're stranding the user in that folder, create a second share.  Alleviate all this nightmarish ACL overhead.  While these guys are absolutely right, you will be creating confusion moving forward.  Why can't you just have a second share and map it out on a different drive?
0
dimar54Author Commented:
Thank you all for your response this method worked best for me
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.