QNAP Restrict AD User to only access specific subfolder

We have a user on our domain which we need to allow access to a subfolder in a shared network drive. This user has read only permissions on both the QNAP SMB and Windows ACL for this folder. However, when I log on as this user and try to navigate to this folder I get the message "Windows cannot access \\IP Address\QNAP Shared Folder\Sub Folder". When I try to navigate to just "\\IP Address\QNAP Shared Folder" it asks for credentials, but any subfolders within that it just says do not exist.

The only way I can seem to get this user to access this sub folder is to give them read access to every root folder (This sub folder is actually about 5 deep). However this is not an option in this case.

The QNAP model is TS-EC879U-RP, with the latest firmware. Although this shouldn't really make a difference.

Has anyone encountered this before and what would be the method of giving a user Read Only access to a sub folder?

Many Thanks,
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mohammed KhawajaManager - Infrastructure:  Information TechnologyCommented:
To resolve the issue, create a share which is 5 levels deep and then you should not have any issues.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
AlisterHillAuthor Commented:
Hi Mohammed,

Thank you for your reply. This is what we would usually do, map these in Windows and deploy them either through group policy or the logon script. However this user will be using a Mac and Windows devices so this is not an option. I am also able to apply permission to a folder however many subfolders deep on our windows fileserver, give the user a link and it lets them in. But when I send them the link to the subfolder that they have permissions to on the QNAP Shared Folder it just says the message in the original post.

I do not believe that there is a way on the QNAP to map a new shared folder that is a sub folder of another shared folder? Which is what I think you were suggesting?

Many Thanks,
> I do not believe that there is a way on the QNAP to map a new shared folder
> that is a sub folder of another shared folder?

I'm not sure whether this solves your problem and whether this is officially supported by QNAP, but at least with the current firmware 4.1.4 build 20150910 you can do that:

1. Create a new share that should be used by this user.
2. Click on the 'Edit properties' icon behind this new share.
3. At 'Path' click on the arrow down symbol. You now get a tree with all the folders on your QNAP and can select even folders that are deeper in the tree.
SolarWinds® IP Control Bundle (IPCB)

Combines SolarWinds IP Address Manager and User Device Tracker to help detect IP conflicts, quickly identify affected systems, and help your team take near instantaneous action. Help improve visibility and enhance reliability with SolarWinds IP Control Bundle.

AlisterHillAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for AlisterHill's comment #a40915509

for the following reason:

No solution given by experts.
Because I had a similar problem I was in contact with the QNAP support. They confirmed that creating a shared subfolder of an existing shared folder is officially supported. So the suggestion in my comment with ID: 41022581 should work.

The only thing that you should be aware is that you don't assign Windows ACL rights to the root of the shared folder. That can cause unexpected behaviour. Since I know that I don't use the /O switch in XCOPY when migrating a folder tree from a Windows machine to a QNAP. Instead I copy the data without ACL permissions and assign these rights using Windows Explorer later.
I would recommend ID: 40915353 as solution because this was the first suggestion to create a shared subfolder. This should be a solution as it will grant access for one defined (sub-) folder as requested. My comments just explained and confirmed later, that this is supported by the QNAP devices and how you can do that in the QNAP GUI.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.