Click here to get back home

Controlling listing of directories via NTFS

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Controlling listing of directories via NTFS ablack@carneys. 03-02-2006
Posted by ablack@carneys. on March 2, 2006, 1:31 pm
Please log in for more thread options
Here is what I am trying to do.

I want a parent folder called "shared" to have several subfolders that are
specific to individual groups. I have no problem controlling NTFS access to
these subfolders by simply adding only the groups to these folders as needed
to control file access, but I was hoping to completely hide the subfolders
between the various groups, so that when they access "shared" they would only
see the top level directories that match their group membership. I have
tried various ways, but in every case the folders continue to be viewable.

Any ideas are appreciated.

Allan

Posted by Danny Sanders on March 2, 2006, 2:04 pm
Please log in for more thread options
Windows does not work like Novell. Using only NTFS permissions will not
accomplish what you want.

With Windows folders shared with the "$" are not seen when browsing.

Or you might Google for a third party application.

hth
DDS W 2k MVP MCSE

> Here is what I am trying to do.
>
> I want a parent folder called "shared" to have several subfolders that are
> specific to individual groups. I have no problem controlling NTFS access
> to
> these subfolders by simply adding only the groups to these folders as
> needed
> to control file access, but I was hoping to completely hide the subfolders
> between the various groups, so that when they access "shared" they would
> only
> see the top level directories that match their group membership. I have
> tried various ways, but in every case the folders continue to be viewable.
>
> Any ideas are appreciated.
>
> Allan



Posted by ablack@carneys. on March 2, 2006, 2:48 pm
Please log in for more thread options
Thanks for the response. I was in fact comparing to Novell, but thought
there was a work around. As long I know this is a limitation, I can accept
that and focus on the raw NTFS access and security to the various folders and
group access.

Thanks once again.

"Danny Sanders" wrote:

> Windows does not work like Novell. Using only NTFS permissions will not
> accomplish what you want.
>
> With Windows folders shared with the "$" are not seen when browsing.
>
> Or you might Google for a third party application.
>
> hth
> DDS W 2k MVP MCSE
>
> > Here is what I am trying to do.
> >
> > I want a parent folder called "shared" to have several subfolders that are
> > specific to individual groups. I have no problem controlling NTFS access
> > to
> > these subfolders by simply adding only the groups to these folders as
> > needed
> > to control file access, but I was hoping to completely hide the subfolders
> > between the various groups, so that when they access "shared" they would
> > only
> > see the top level directories that match their group membership. I have
> > tried various ways, but in every case the folders continue to be viewable.
> >
> > Any ideas are appreciated.
> >
> > Allan
>
>
>

Posted by Roger Abell [MVP] on March 2, 2006, 8:18 pm
Please log in for more thread options
If you are hosting this on Windows Server 2003 then you should
research Access Based Enumeration, as it will do what you want.

> Here is what I am trying to do.
>
> I want a parent folder called "shared" to have several subfolders that are
> specific to individual groups. I have no problem controlling NTFS access
> to
> these subfolders by simply adding only the groups to these folders as
> needed
> to control file access, but I was hoping to completely hide the subfolders
> between the various groups, so that when they access "shared" they would
> only
> see the top level directories that match their group membership. I have
> tried various ways, but in every case the folders continue to be viewable.
>
> Any ideas are appreciated.
>
> Allan



Posted by ablack@carneys. on March 2, 2006, 9:58 pm
Please log in for more thread options
Roger;

Thanks for the post. I downloaded the tool from Microsoft and WOW! it works
great. This should just be integrated with all W2K3 installs it really is a
big item to have. Thanks again you made my day. I have a lot of servers to
apply this to, and I am going to have some really happy customers.

"Roger Abell [MVP]" wrote:

> If you are hosting this on Windows Server 2003 then you should
> research Access Based Enumeration, as it will do what you want.
>
> > Here is what I am trying to do.
> >
> > I want a parent folder called "shared" to have several subfolders that are
> > specific to individual groups. I have no problem controlling NTFS access
> > to
> > these subfolders by simply adding only the groups to these folders as
> > needed
> > to control file access, but I was hoping to completely hide the subfolders
> > between the various groups, so that when they access "shared" they would
> > only
> > see the top level directories that match their group membership. I have
> > tried various ways, but in every case the folders continue to be viewable.
> >
> > Any ideas are appreciated.
> >
> > Allan
>
>
>

Similar ThreadsPosted
How to prevent deleted directories August 2, 2005, 12:26 pm
unexpected directories created July 9, 2008, 10:42 pm
Help with security rights for Home directories June 7, 2005, 4:48 am
listing of all permissions on a server June 1, 2005, 10:46 am
Listing user privileges March 3, 2006, 9:09 am
Controlling IT manager access? September 11, 2008, 4:05 pm
listing of shared folders in 2003 based domain February 10, 2008, 6:17 am
Controlling access through a remote access policy August 19, 2005, 7:00 am
NTFS Lockdown December 5, 2005, 1:37 pm
NTFS Permissions February 20, 2006, 7:11 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap