Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I use computers in a shared house, the computers are running Windows 7 and Windows Vista and are connected to a network with Windows Server 2003 as the DC. I want to hide certain folders from other users, and not just using the hidden folder attribute. I know I can limit the permissions on folders to grant / deny users acees but was wondering if there is a way just not to display the folders to certain users so they don't even know they're there. e.g. User A will see the contents of the S drive asFolder1, Folder2, Folder3. User B will see the contents of the S drive as Folder1, Folder2. Perhaps I'm looking at this the wrong way but any advice would be appreciated.

I'm going along the mothod of "What people don't know is there they aren't curious about"

share|improve this question
Downvoter care to explain... No? I thought not. – Joe Taylor Aug 13 '12 at 14:53
up vote 1 down vote accepted

Sounds like you need Access Based Enumeration

share|improve this answer
That sounds perfect. – Joe Taylor Feb 19 '10 at 12:42

Your looking at it the wrong way.

Just make sure you create your folder structure in such a way that users only see the folders they are meant to see when drives are mapped. The NT level security will allow you to remove complete permissions on a folder, but will not hide the folder from being seen, whether mapped or when accessing the server using network neighbourhood.

If people are not meant to see it, then put it in a place they can't get too.

share|improve this answer
The point is that the users think they have access to everything on the machine. I'm trying to avoid the access denied situation – Joe Taylor Feb 19 '10 at 11:39
@Joe How would they know if they can't see it? Are you sharing the whole drive? – BinaryMisfit Feb 19 '10 at 12:01
The whole drive is shared. Its a raided drive on the server that all users use to keep their documents, photos etc safer than if they were just on a standard HDD . I think I'm just going to have to go with permissions but was hoping to avoid it if possible. – Joe Taylor Feb 19 '10 at 12:41
@Joe. Based on your accepted answer I stand corrected :) – BinaryMisfit Feb 19 '10 at 13:00
thanks for your time anyway, I'd never even heard of access based enumeration but shall be recommending it at work too. – Joe Taylor Feb 19 '10 at 13:26

You could create (and share) different directories for each users and create junction and/or hard link to only the sub-directories they could access

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .