How to make Shared Folders invisible to user groups that have no permissions in Windows Server 2019 AD?

Question

I'm trying to make 3 groups, the classic, an HR dept, a Finance dept and an Admin Dept and have them all these 3 have their own folder in the file server while having given them permissions to read/write essentially! Ive configured everything based on many many many many guides but still i cannot make it so as the folders are invinsible from one group to another! Meaning that HR dept should see only HR's folder and thats it! I've done tons of things enabled enumaration but still cant figure it out.. Any ideas? And any specific photos that you need me to provide to see my setup?

Thank you everyone in advance!

Answer 1

Hi VLACHAKIS ANDREAS,

Create a shared folder that will be the root folder.

Enable access-based enumeration

Create the subfolders inside this root folder, disable inheritance of security permissions and assign only the group that will have access.

Note: Only the root folder will be shared!

I hope it helps,

Edgar Hideki