how to prevent direct access to DFS Namespace shared folders

I have made a DFS Namespace named \\dc1\bank. There are some other folders from another file servers(for example \\dc1\bank\folder1 is the folder on \\fs1\folder1). I want to restrict users to direct access to folders on the other file servers (for example: restricting to direct access to \\fs1\folder1 ). Can I do this in windows server 2008 R2 ?


Just set give the users Traverse Directory only on \\dc1\bank and they'll only be able to navigate the directory. If you don't give them List Folder/Read Data, then they won't even be able to see anything in it.

Then just give them whatever permissions they need on \\fs1\folder1 and map it to the users however you normally would (GPO, logon script, email the link, etc). The security model is identical to how you would solve this problem without DFS.