I found an error at the place I work. We have a users folder in our data share and in there is everybody's user folder for their file storage.
Z:\data\users\%username%
The error I found is the users folder had "domain users" with read rights and it was inheriting down to all subfolders/files....So the problem is any domain user was able to see anybody elses files. Not good :) So I removed that. Now users can still get to their folder with the direct map like above, but I want users to be able to see the folder and open it up, just only have it list whatever folder is theirs or any they may have access to, or be able to browse to it if their mapping is broken.
So for the users folder I want to set special permisions for "domain users" and I will put "for this folder only", but what permisions should I check on the advanced screen?