How to authorize user for a subfolder

authorizationdirectorywindows-server-2003

Using Windows Server 2003, I would like to give a user full access to a subfolder. Let´s say I have folder A with subfolders B1 and B2. I observed that when granting authorization to B1, the user cannot access A. This is bad because user can´t reach B1. But if I grant authorization to A as well, the user can also access B2, which should not be allowed. I do not want to edit every folder.

Best Answer

You need to set directory B1 and B2 so that they do not inherit their permissions from directory A. Directory A will still require that the users have permissions to it so that they can see directories B1 and B2.

To do this, for each of B1 and B2, go to the Security tab in the directory properties, click the Advanced button and de-select Allow inheritable permissions from the parent to propagate to this object and all child objects.. Set the required permissions for the directory then apply your changes.

You should now have all required users able to read from directory A, and only the desired users from directories B1 and B2.