I hope I am in the correct forum for this.

situation:
on the network i have a folder ABCDOC with many folders underneath it.
ABCDOC folder is shared with just the Read permission for everyone.
The security for ABCDOC for everyone is Read, Folder List content and Read
and Excute.

I have one user that needs to be able to create folders and add files to one
of the folders (XYZDOC) under ABCDOC folder.

I went to XYZDOC folder and added the user in the security list to have All
but full control in that folder. The folder is not set to be shared at this
level however all users can Read and open files in that folder.

When the user went to create a folder he received an access denied message.

I do not believe I need to share XYZDOC since all the other folders under
ABCDOC are not shared (well they don't have the little hand on their folders)
and everyone can access those folders and files.

The only way I was able to get this user to create folders and add files to
the folder was to go into the Shared tab under ABCDOC and give him
permission. I had to give him the Change and Read permissions.

I really don't want him to have the Change Permission at that level. What
do i need to do so that he can have permission to create in the XYZDOC folder
and not any of the other folders?
--
Thank you,

Rights and Permissions are entirely different things in Windows.

Permissions are placed on NTFS Files & Directories, shares,
registry keys, AD objects, etc.

Rights are generic privileges given directly to Groups (users and computers)
such as Change System Time, Logon Locally, Debug processes, etc.

"luv2bike2" <luv2bike2@discussions.microsoft.com> wrote in message
news:1C3E7B8E-B08E-4C48-8994-DE3687288254@microsoft.com...
On the Share is READ -- this is entirely separate from the object NTFS
permissions.

Users need both.

So put user in a group, and grant those permissions to that group.

No issue for the NTFS permission but did you give this user at least
CHANGE on the Share?

If user has Change on the Share and Modify on the directory he/she
should be able to add files there.

Did the user already have that folder OPEN while you did this?
(It might not matter for Explorer and directories but it would matter
for an open file.)


Correct but you do need to adjust the permissions on that share the user
actually connects through.

Either the Share or the NTFS permissions can set the MAXIMUM when
using that share to access those NTFS objects.