I'm newer to this, but my Sr. Sys Admin has given me a project and he's currently out of town, and I'm stuck.
We have a file share system set up for each department. For example:
\\server\A - Department A
\\server\B - Department B
\\server\C - Department C
We have department B who needs read/execute access to a single folder inside of share A.
\\server\A\folder1 - Department B needs access
First, I tried creating an AD group called "ShareAReadOnly" and adding Dept B to that group. Then I gave that group 'List' to Share A, and then 'Read/Execute' to 'folder1'.
This works, except that Dept B can now list everything in \server\A. They can't open or read anything, but they can navigate through the share, reading folder names and file names.
EDIT: I also tried only giving read/execute to \server\A\folder1, but then I can't actually map the drive to the department's computers, because it says they don't have access.
Is there a better way for me to do this? My goal is to map the network share A to Dept B, but have them only able to view \server\A\folder1, and not even list anything else.
Sorry for my inexperience, this might be a quickly-solved issue.