asked on
How to restrict access to folders below a folder shared with "Everyone"?
Hi,
We have a folder called "Shared" on our SBS server which is shared at the top level with "Everyone".
We've been asked to create some remote users on the system and to only grant them access to a couple of folders within the Shared folder. I may be missing the obvious and over complicating things but I can't think of an easy way to just grant access to certain folders below that shared folder without removing the "everyone" permission from the top level which I'm reluctant to do as it will open a can of worms.
Any advice gladly received!
Thanks
Adam
We have a folder called "Shared" on our SBS server which is shared at the top level with "Everyone".
We've been asked to create some remote users on the system and to only grant them access to a couple of folders within the Shared folder. I may be missing the obvious and over complicating things but I can't think of an easy way to just grant access to certain folders below that shared folder without removing the "everyone" permission from the top level which I'm reluctant to do as it will open a can of worms.
Any advice gladly received!
Thanks
Adam
Active DirectoryMicrosoft Server OS
Last Comment
Gavin Reid
ASKER
Hi Foxluv,
Thanks for that, problem is that they have 55 users and I'll have to add them all in manually if I don't use the everyone group. The top level folder has say 50 subfolders and I want everyone except 1 person to have access to all 50 folders, the 1 person will only have access to 1 folder of the 50 but everyone else will also need access to that 1 folder. If I remove Everyone from the top level surely I'll have to manually put each user except that one I want to restrict back in won't I?
Thanks
Thanks for that, problem is that they have 55 users and I'll have to add them all in manually if I don't use the everyone group. The top level folder has say 50 subfolders and I want everyone except 1 person to have access to all 50 folders, the 1 person will only have access to 1 folder of the 50 but everyone else will also need access to that 1 folder. If I remove Everyone from the top level surely I'll have to manually put each user except that one I want to restrict back in won't I?
Thanks
Even easier. Add the user with the same method as above(leave Include inheritable permissions from this object's parent checked) and click deny. He will be denied access to the folder.
deny.JPG
deny.JPG
ASKER
Hi,
Surely that will deny access to the 1 folder I want that user to have access to. I effectively want to deny access for 1 user to all except 1 folder under the Shared folder. If I remove inherited permissions on that 1 folder and add the user I want to give access to then everyone else will not be able to see the folder but they need to see it too. You can see why I was confused enough to ask the question! :-)
Surely that will deny access to the 1 folder I want that user to have access to. I effectively want to deny access for 1 user to all except 1 folder under the Shared folder. If I remove inherited permissions on that 1 folder and add the user I want to give access to then everyone else will not be able to see the folder but they need to see it too. You can see why I was confused enough to ask the question! :-)
SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
Thanks Foxluv and David, have split the points between you as I'm sure Foxluv's suggestion will work but I'm too chicken to run a script on this server and David's suggestion sounds like a good way around. Thanks both
Include inheritable permissions from this object's parent>click ADD
You can now highlight and remove EVERYONE from this folder and add who you need to access it.