Permissions problem

[DC]

I have a permissions situation. I am and old NetWare
guru, and relatively new to the Windows Server 2000/2003
permissions world. This is what I am having a problem
with.

We have a Marketing share on one of our servers that all
users in the Marketing Group have access to. The share
permissions are Read and Change enabled. The security
tab has Read & Execute, List Folder Contents, and Read
rights checked under the same directory Marketing.

Then under the Marketing directory, we have the
BusinessDevelopmentGroup directory, which contains
several subdirectories under this directory. My dilemma
is that I want to give rights to only 2 directories under
this directory. For example, I have directories A thru
Z, but only want to give a few people access to
directories C & D. How then, shall I do this? If I give
people permissions to directories C and D exclusively,
then they have to map directly to these directories which
I don't want to have to add a separate mapping for this
purpose.

Ideally, I would like to give them a mapping to the
Marketing directory, and have them able to see these 2
directories only in the Business Development directory.
Any ideas?

Here is the directory structure:

c:\Marketing ("Share level"- Read and Change
enabled. "NTFS permissions"-Read&Exec,List
FolderContents, Read)
Business Development (no rights have been given
to the users that need access to Directories C and D)
A
B
C (Give access here.)
D (Give access here.)
E

Bottom line: Is there a way to map to the marketing
share/directory and be able to see directories C and D
without the need for specific mapping(s) to directories C
and D?

Thanks!!

 

[Herb Martin]

I have a permissions situation. I am and old NetWare
guru, and relatively new to the Windows Server 2000/2003
permissions world. This is what I am having a problem
with.

First things to tell a "Netware guy" are:

1) "Rights" are NOT permissions in Windows ("rights" has
a specific technical meaning and are separate)

2) Shares and the NTFS File system share similar concepts but
completely differernt -- and interacting -- SETS of
permissions

Share permissions and NTFS file system permissions should
FIRST be considered separately.

Re-read the above a couple of times -- it won't always
matter but when it does the Netware experience will trip
you up.

We have a Marketing share on one of our servers that all
users in the Marketing Group have access to. The share
permissions are Read and Change enabled. The security
tab has Read & Execute, List Folder Contents, and Read
rights checked under the same directory Marketing.

Then under the Marketing directory, we have the
BusinessDevelopmentGroup directory, which contains
several subdirectories under this directory. My dilemma
is that I want to give rights to only 2 directories under
this directory.

For example, I have directories A thru
Z, but only want to give a few people access to
directories C & D. How then, shall I do this? If I give
people permissions to directories C and D exclusively,
then they have to map directly to these directories which
I don't want to have to add a separate mapping for this
purpose.

Mapping is done at the SHARE, so you need to give the
"maximum permission" you will ever allow on the files
within that share.

E.g., if you will only let people read "some of" the files,
those people can be given READ at the share, but if a
group of people need Full Control of (some) files then
the share must be marked full control for that group.

Ideally, I would like to give them a mapping to the
Marketing directory, and have them able to see these 2
directories only in the Business Development directory.
Any ideas?

"Seeing" subdirectories is based on READING the
parent directory. Using the subdirectory is based on
the subdirectories OWN permissions.

Here is the directory structure:

c:\Marketing ("Share level"- Read and Change
enabled. "NTFS permissions"-Read&Exec,List
FolderContents, Read)
Business Development (no rights have been given
to the users that need access to Directories C and D)
A
B
C (Give access here.)
D (Give access here.)
E

Bottom line: Is there a way to map to the marketing
share/directory and be able to see directories C and D
without the need for specific mapping(s) to directories C
and D?

Not clear what you wish to change or accomplish precisely.