Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

File security settings and Shared Folder permissions--how do they interact?

Posted on 2006-07-13
3
245 Views
Last Modified: 2013-12-04
In Windows 2000 server, our folder share permissions were pre-set to Full Control for the everyone group (I believe that is the default.)  To limit access to folders and shares, I assigned specific groups and users in the folder securities tab.  In the process, I removed a lot of inherited permissions.

I just upgraded my servers to Windows 2003, and discovered that my 2000 server method did not work as well because the everyone group did not get full rights by default.  (I actually had not even realized the Folder Permissions setting was present in Windows 2000.)  In my attempt to get things working again, I did some research on permissions and security and came to the conclusion that the way we had done things in Windows 2000 was not the best way.  Specifically, removing a lot of inherited permissions bogged down the database with unnecessary data (is this correct?)  

Now I am trying to work out the interaction between share permissions and folder securities.  I have read a couple manuals and they give me just enough information to want more.

My questions are:
1.  Is there a way to allow only certain users and groups to see a particular share?  
2.  Is the removal of inherited permissions best avoided, if possible?
3.  What exactly does the Share Permission control?
4.  Can someone point me to a good resource that describes permissions in detail with examples?

Thanks,
srsdtech
0
Comment
Question by:srsdtech
  • 2
3 Comments
 
LVL 3

Accepted Solution

by:
GeneralMandible earned 500 total points
ID: 17104508
I think this maybe the issue you're dealing with:
http://www.windowsitpro.com/Article/ArticleID/41280/41280.html

& here is a guide to some settings:
http://www.mcmcse.com/microsoft/guides/ntfs_and_share_permissions.shtml
http://support.microsoft.com/default.aspx?scid=kb;en-us;325361

These should answere a few of your questions
0
 
LVL 3

Expert Comment

by:GeneralMandible
ID: 17104611
I believe in Windows a share is either visible or hidden globally using a $ at the end of the share name (correct me if I'm wrong).  I think all you can do is restrict access...or make it hidden (& restricted) and only give the respective groups/users the share name.
0
 

Author Comment

by:srsdtech
ID: 17109464
Thanks General Mandible.  
I looked at those, and they appear to address the subject very well.  I think they will answer my questions, though it'll probably take me a while to put everything into place.

I'll also try out the $ part.  There are some necessary shares it is best folks just don't know about.

srsdtech
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
suspending the anti virus 6 139
Excel file "Document not saved" 8 130
firewall inside of network 9 80
UAC Controls - confused 9 90
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question