Can this be done: a group can write at top level (of file folders), but is only allowed to execute sub-folder files?

can done?

a group can write @ top level of file folders, allowed execute sub-folder files , not allowed read/write sub-folder files.

e.g.

group_top can write @ top folder h:\

it cannot open sub-folders. cannot read, cannot modify, cannot write:

• h:\folder1\file1.xxx
• h:\folder1\file2.xxx
• h:\folder2\file3.xxx
• ...

it allowed execute:

• h:\folder1\file1.xxx
• h:\folder1\file2.xxx
• h:\folder2\file3.xxx
• ...

hi,

if "execute" here means "open", not able so. see:

http://technet.microsoft.com/en-us/library/bb727008.aspx

but if means "run executable", test give user "traverse folder/execute file" permission not "list folder/read data" on "files only" of h:\folder1 see result.

---

technet subscriber support in forum |if have feedback on our support, please contact tnmff@microsoft.com.

Windows Server  >  File Services and Storage