How to properly configure folder permissions to mount network drives via GPO?

Question

Access rights

Hello!

There is such a folder structure on the server:
D:\Departments
D:\Departments\IT
D:\Departments\Sales

A GPO rule is registered on the domain, in which each authorized domain user mounts a disk with access to a folder that matches the name of his department (OU in AD).

Everything is successfully mounted until you change the access rights to folders via NTFS (so that users of one department cannot open a folder of another department, knowing its path). When I assign access rights to subfolders (IT, Sales) only for the relevant departments (security groups in AD), users' disks are no longer mounted (the GPO rule does not work).

Please tell me how to correctly assign folder access rights so that users have access only to the folders of their department and at the same time the GPO rule works.

Answer 1

Problem solved :)