[ Thanks to Michael
Hall for this link. ]
“It is easy to give everyone in a group access to a directory,
but to allow one new person access to just part of that, is
troublesome. The very last thing you want to do is to move the
affected directory out of the share. Sure, you can create a new
group containing the old one plus the new person for access to the
new share, but then people have to remember where this special case
lives. It goes something like this: “oh the payroll files all live
in the Finance share, but Marvin needed access to the July folder,
so that moved out. Go find it in the other share…” As you can
see, this quickly gets insane if those types of things are allowed
to happen. IT should be able to find a workable solution, enabling
the business side to function as smoothly a possible.”