Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Using Windows Server 2003, I would like to give a user full access to a subfolder. Let´s say I have folder A with subfolders B1 and B2. I observed that when granting authorization to B1, the user cannot access A. This is bad because user can´t reach B1. But if I grant authorization to A as well, the user can also access B2, which should not be allowed. I do not want to edit every folder.

share|improve this question
up vote 1 down vote accepted

You need to set directory B1 and B2 so that they do not inherit their permissions from directory A. Directory A will still require that the users have permissions to it so that they can see directories B1 and B2.

To do this, for each of B1 and B2, go to the Security tab in the directory properties, click the Advanced button and de-select Allow inheritable permissions from the parent to propagate to this object and all child objects.. Set the required permissions for the directory then apply your changes.

You should now have all required users able to read from directory A, and only the desired users from directories B1 and B2.

share|improve this answer
Have I understood it right? I have to grant the user access to folder A so that he can see folder B1. To avoid the user being able to access B2, I have to forbid B2 to inherit permissions from A? – Jan-Frederik Carl Jul 20 '11 at 12:39
Yes. If the user can't access directory A, they can't see that directories B1 / B2 exist - they will need at least Read & Execute permissions to directory A. You could bypass the need to give permissions to directory A by sharing directories B1 / B2 and have the users access those shares directly, but for the scenario you describe that might not be an option for you. – Mike Insch Jul 20 '11 at 12:59

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.