Deny permission for root, but now needs access to one folder

[googlemad]

A member of staff (external careers advisor) has a Deny permission set on a shared folder root (Let's call it Staff Info) which is inherited by all sub folders

There is a sub folder which they now require access to (*sigh*!).

Is there an easy way to give them access to this folder without having to remove the Deny permission from the shared folder root?

[TheMinister]

Not really easy. You'll have to remove the inherited permissions for that folder and specifically give her access.

Unfortunately, this also means that any permissions to set on the root folder from now on in are also not inherited.

[Chuckster]

I had this issue and my way was to create a security group; put the user in said group and apply said security group to the folder with the relevant NTFS permission.

Using DFS, I managed to create a namespace and then a folder pointing to the one folder that this person needed access to.

Using GPO, I created a mapped drive to the said share and it only gets mapped upon the condition that if you're in the security group I created.

Hope this helps.