Win2k NTFS permissions problem

[gassan777]

Hello.

I have this problem:

I need a bunch of guys to have access to lets say this place:

www.test.com/boom

boom should be NTFS password protected.

At the same time I don't want them to be able to read from root folder.

And I set these permissions for their group on Web folder (root folder):

List Folder / Read Data

Read Attributes

Read Extended Attributes

Read Permissions.

(This is from Advanced menu)

If they go to www.test.com/boom now they will get prompt and they will have to enter their Active Directory username/password. BUT they can also read from root directory which is something I don't want.

I tried so many combinations. I thought all they need is TRAVERSE FOLDER/EXECUTE FILE permission on root directory and read permissions on the folder itself, but it seems that traverse folder/execute file permission is not enough.

Can someone tell me why? and how can I fix this?

Thanks,

Tim

[Agent Smith]

Hello gassan777 and welcome to the Forum. I am not 100% sure on this, but I think what you need to do, is set an explicit deny rule on the root directory (Security>Advanced, then actually deny the read etc rights). Then go to the next dirctory in your tree (boom) and under the security tab, uncheck the "allow inheritable permissions etc" box and choose to copy the rights and permissions. Now you need to select the group and remove the explicit deny rules you have set for the root, but only on this directory. It would probably be a good idea to reset all the permissions on child objects as well.

Hope this helps. Regards. Mr. M.

[gassan777]

Well :( Sorry but it doesn't seem to work...if you set deny on main folder it denies it completely to all children folder even if some of them don't inherit permissions...