Share Permissions vs Security

microsoft.public.windows.server.security - Supporting MS Windows network? Read here before it's too late! 

Subject Author Date Share Permissions vs Security Buck Turgidson 01-17-2010  Re: Share Permissions vs Security Meinolf Weber [... 01-17-2010  Re: Share Permissions vs Security news.eternal-se... 01-17-2010  Re: Share Permissions vs Security Meinolf Weber [... 01-17-2010  Re: Share Permissions vs Security news.eternal-se... 01-17-2010  Re: Share Permissions vs Security Meinolf Weber [... 01-17-2010  Re: Share Permissions vs Security Matija Kapralje... 01-19-2010  Re: Share Permissions vs Security FromTheRafters 01-19-2010  Re: Share Permissions vs Security Matija Kapralje... 01-20-2010  Re: Share Permissions vs Security FromTheRafters 01-20-2010  Re: Share Permissions vs Security Matija Kapralje... 01-20-2010

Posted by Buck Turgidson on January 17, 2010, 9:42 am Please log in for more thread options I am sure that this question has been asked thousands of times, but I would like to re-ask it. I believe I know that share permissions apply to a share, and that NTFS permissions apply to files and folders. When I look at the Properties for a share, why do I even see the NTFS permissions, which I gather is the last tab labelled "Security"? If we're working in the context of shares, why do we also see NTFS permissions in the properties? Sorry if this question sounds odd. I am just trying to get a broader understanding. Posted by Meinolf Weber [MVP-DS] on January 17, 2010, 9:50 am Please log in for more thread options Hello Buck, They are different, share permissions are for the shared itself and will win, regardless of which NTFS permissions are set. So if you set the share permissions to read-only and the NTFS permissions to a security group to Full control, they still have read-only access. So share and NTFS permissions must always be set as a combination. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm show/hide quoted text > I am sure that this question has been asked thousands of times, but I > would like to re-ask it. I believe I know that share permissions > apply to a share, and that NTFS permissions apply to files and > folders. > > When I look at the Properties for a share, why do I even see the NTFS > permissions, which I gather is the last tab labelled "Security"? > > If we're working in the context of shares, why do we also see NTFS > permissions in the properties? > > Sorry if this question sounds odd. I am just trying to get a broader > understanding. > Posted by news.eternal-september.org on January 17, 2010, 10:18 am Please log in for more thread options Thanks for the response. But what do the NTFS permissions apply to? Is it the folder that underlies the share? show/hide quoted text > They are different, share permissions are for the shared itself and will > win, regardless of which NTFS permissions are set. So if you set the share > permissions to read-only and the NTFS permissions to a security group to > Full control, they still have read-only access. > So share and NTFS permissions must always be set as a combination. Posted by Meinolf Weber [MVP-DS] on January 17, 2010, 10:32 am Please log in for more thread options Hello news.eternal-september.org, This is depending on which folder you configure the NTFS settings. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm show/hide quoted text > Thanks for the response. But what do the NTFS permissions apply to? > Is it the folder that underlies the share? > >> They are different, share permissions are for the shared itself and >> will win, regardless of which NTFS permissions are set. So if you set >> the share permissions to read-only and the NTFS permissions to a >> security group to Full control, they still have read-only access. >> >> So share and NTFS permissions must always be set as a combination. >> Posted by news.eternal-september.org on January 17, 2010, 11:21 am Please log in for more thread options On the properties of the share, you see a "Security" tab, which are NTFS permissions. To what folder do those NTFS permissions apply? show/hide quoted text > This is depending on which folder you configure the NTFS settings. > Best regards Similar Threads Posted MSIE 7 Requires Browser Security Permissions to Run a Network File Share EXE? November 2, 2006, 11:51 pm Share permissions conflicting with NTFS permissions May 18, 2006, 1:16 pm Everyone Share Permissions June 24, 2008, 11:42 am Extract share permissions November 9, 2005, 8:16 pm Share permissions - cross-domain May 1, 2006, 11:47 am Administrator Group Share Permissions July 27, 2006, 11:25 am NTFS Permissions for public share October 5, 2006, 2:08 pm Win2k8 in a workgroup - share permissions April 7, 2009, 11:12 pm Utility to export file, folder, and share permissions July 10, 2006, 7:24 pm NTFS/Share Permissions design for DFS (Usr->GL[Job Role]->DL[Resource]) October 28, 2006, 9:57 am