Modeling a Windows 2003 NTFS Share Scheme

[danzenie]

Hello,

We currently have the ReadyNAS joined to the domain. It sees the user accounts, and groups perfectly. Now, we have a share scheme on a Windows 2003 server that we would like to model on the ReadyNAS:

/share [Top level shared directory]
->/user1 [access allowed only to user1 and admins]
->/user2 [access allowed only to user2 and admins]
->/accounting [access allowed only to the accounting security group and admins]
->/marketing [access allowed only to the marketing security group and admins]

We map the top level to all users [\\win2k3\share], and because of access based enumeration users can only see directories they have access to (their home, and their department).

My question is how do we go about replicating such a scheme on a ReadyNAS? We are able to create shares, but they're all top level shares. So on the ReadyNAS we have \\readynas\user1, \\readynas\user2, and so on, but this is not what we want.

Thanks in advance for any suggestions or comments.

[danzenie]

OK, DFS is the way to go. So I basically create a DFS root on the win2k3 server (\\domain.com\share), and add links from the ReadyNAS to this root.

This works ok, but then it means that I have to create many many DFS link. Basically a DFS link for each user in my domain 100+, and for each department. Anyone knows if there is a better way?