Folder Permission Intersections

Hi,
I'm not an administrator of any great experience, but I've a folder
permission problem I can't solve.
Everyone in my company is assigned to a division & are a member of the
appropriate divisional group on AD (eg MIIS_RA, MIIS_DA, etc). Each
division has its own Performance Manager & they are included in another
group (Performance Managers).
I would like to restrict a set of folders to just the Performance
Managers, but only allow them to access their own division's data, eg:

Root->
PerformanceData->
AA->
AC->
DA->
etc...

The AA folder should only be accessible if you are in both MIIS_AA and
Performance Managers. I've tried to limit the PerformanceData to just
Performance Managers, then AA to just MIIS_AA, but if the file path is
known, anyone from MIIS_AA can go straight to that folder.
Am I missing something? How can I do this without asking IT to split my
Performance Managers group into Performance Managers_AA, Performance
Managers_AC, etc?

Thanks in advance.

Ben

.

Relevant Pages

  • Re: Folder Permission Intersections
    ... the "regular users" did not need access to you could leave permissions as is ... permissions as part of best practice in assigning permissions to folders ... each division and then assigning that group permissions to their folder ... also keep all the performance managers in the performance managers group ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Folder Permission Intersections
    ... the "regular users" did not need access to you could leave permissions as is ... each division and then assigning that group permissions to their folder ... also keep all the performance managers in the performance managers group ... positions since you would only need to change a user's group membership ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Folder Permission Intersections
    ... also keep all the performance managers in the performance managers group ... that you currently have which would be used to give permissions to the ... parent folder. ... making errors assigning permissions and easier to manage when users change ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Folder Permission Intersections
    ... also keep all the performance managers in the performance managers group ... that you currently have which would be used to give permissions to the ... parent folder. ... making errors assigning permissions and easier to manage when users change ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User Account Suddenly Unaccessable
    ... me that only the Administrator has access to the CWLee profile folder. ... The Sharing tab has "Do not share this folder" checked, ...
    (microsoft.public.win2000.general)