I have a Windows 10 PC that acts as a file share. Within this file share there are several hundred folders. I'd like to know if there is an easy to grant two different users different permissions to these several hundred folders.
For example, I'd like like one users to be have full control to folders A, B, C and the other user to have full control to folder 1, 2, 3 - Neither of which should be able to see what access the other user has.
Is there an easy way to do that other than going to each folder and granting each user appropriate access?
I have not tried this myself so you might want to try this with 2 or 3 folders first to see if it works.
Create a temporary folder for each user: UserATemp, UserBTemp, etc. Move the folders you want each user to access into their respective temporary folder. Set the proper permissions on the UserATemp folder. Then under the security tab click on advanced. On the advanced security and sharing window click the check box for Replace all child object permission entries.... then apply. Then move all the subfolders back to where you had them first.
Unfortunately that did not work. The moment I move the folder over to the original subfolder, neither users are able to see any folders.
You can try this, again I have not tried it, though:
Easier way to set, copy and manage NTFS permissions (ACLs) on files and folders in Windows
Thanks for your feedback again...
I tried using this tool - seems the right one but when I try to apply changes using this tool, it doesn't seem to update the ACL on the folders. Doesn't look like its saving it.
Maybe try "Run as administrator" when you start it? But I have never actually used the tool myself... just found it on google.
Probably not, but if its a windows 10 pro machine you could try creating new groups for the users and trying to give those groups permissions over the top folder while setting the security permissions to also deny access for the opposite group. Perhaps you could even skip the part about taking ownership or permissions and simply deny the opposite group access to the other's folders.