How do I set permissions on a folder to "List Folder Contents" ONLY

Jim 306 Reputation points
2024-01-15T16:50:56.29+00:00

Server 2022. I have a folder with 3 subfolders. I have 1 security group "Managers" that I want to have Modify rights to it and all of the 3 subfolders, plus any folders created after..
I have another security group "Employees" that I want to have Modify access to only one of the subfolders, and List folder contents to everything else. I'm getting confused on a couple of things. How should I set up inheritance so that any folders created down the road only get the "List Folders Contents", and nothing else? But the Employees can still have Modify access to the one folder? Also, how do I turn on "List Folder Contents" not NOT read? When ever I check off List Folder Contents, "Read & Execute" and "Read" also get checked off. If I select "Show Advanced Permissions" I can "Clear All" I can check off "List folder / read data". But that says to me the user could then open a file read only, which I do NOT want them to be able to do. Can somebody walk me through this?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,682 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. MotoX80 35,501 Reputation points
    2024-01-16T00:44:39.7033333+00:00

    I recently answered a similar question. https://learn.microsoft.com/en-us/answers/questions/1491037/only-allow-access-to-one-folder-and-its-subfolders I believe that the answer to your question is the "Applies to" settings. By selecting "This folder only", that allows the user to read the directory but not any file contents. (The "and files" part.) User's image

    In the testing that I did, my testuser could see that Folder1, 2, and 3 existed, and that there was a file in the root of Data, but could only access file contents under Folder3. You might want to limit the Employee's access to "This folder only", because even if they can't read the contents. simply seeing that a file named 2024-Layoffs.xls exists in one of the managers subfolders might not be good.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.