Dynamic Access Control - User access

dear forum,

i still having few user access issues configuring dynamic access control in our lab environment , hoped find answer here, there nothing find elsewhere.
example folder structure.
level 1 directories:
sales
finance
planning

level 2 directories (planning):
party
rental
comptetition

issues:
- users keep seeing folder not have access to, though access based enumeration has been activated.
- users access keeps being blocked if have not configured traversefolder + list folder permissions on level 1 directories, while user has modify permissions on level 2 directories.

want:
- on both level 1 , level 2 there multiple directories.
- want give user permissions level 2 directory called "party".
- not want user able see, nor directly access other directories or files on level 1 or level 2 other "party" directory , contents.

how can accomplish this?

with kind regards,

bob lauteslager

if folder planning delegate y not try home folder option in ad. can try mapping folder user.

Windows Server  >  Directory Services