i have this folder 'aa' which contains many excel, pdf,
doc files & a sub-folder named 'bb'. i want a particular
group named 'qata' to be able to only list contents
of 'aa' not read any data but at the same time have full
access to 'bb'.

is this possible. how do i go about doing this.

many thanks.

"sphilip" <anonymous@discussions.microsoft.com> wrote in message
news:149c301c3f8fe$37e545e0$a501280a@phx.gbl...
If you aren't using ntfs, convert to it.

First, assert that the "aa" folder's permissions are inherited from its
parent folder. You need to break that inheritence. In aa's permissions, use
the advanced permissions button to uncheck the "inherit from parent"
checkbox. When prompted, copy permissions over. You'll have to decide
whether you want permissions to trickle down to files or folders and files.
Then its just a question of refining the advanced NTFS permissions. Repeat
for folder bb.

Pay carefull atention to the list box in the advanced ntfs permissions. You
can specify NTFS permissions for different objects, existing or not in your
directory. Never, ever use the deny option, always leave admin with full
control, leave system as is, only add the user groups you wish to control.

You can also use Xcacls.exe
http://support.microsoft.com/default.aspx?kbid=318754

yes i broke the inheritance & also copied the permissions.

My current scenario is :
AA - properties - security - 'only the LIST FOLDER
CONTENTS is checked' - advanced - permission entries -

1. type - deny - DELETE SUDFOLDERS & FILES, DELETE, CHANGE
PERMISSIONS, TAKE OWNERSHIP.

2. type - allow - TRAVERSE FOLDER / EXECUTE FILE, LIST
FOLDER / READ DATA, READ ATTRIBUTES, READ EXTENDED
ATTRIBUTES, READ PERMISSIONS.

BB - properties - security - FULL CONTROL is checked.

im not geting the desired result with this. please advice
on what changes i need to make.

<anonymous@discussions.microsoft.com> wrote in message
news:13f1001c3f924$2199c3d0$a301280a@phx.gbl...
First, what desired result do you not get? Second reread my last post.
As i mentioned in last message, pay attention to the "apply onto" list box.
http://www.windowsitlibrary.com/Cont...files/Fig7.gif

File permissions always overide folder permissions.
http://www.windowsitlibrary.com/Cont...les/Table5.gif

Apply seperate permissions to the AA folder and its contents, though it will
create extra CPU activity. Then overide BB.

If AA denies and BB inherits, the full control on BB is overidden.