Solved

Share or Security permissions?

Posted on 2008-10-09
3
177 Views
Last Modified: 2013-12-05
Hi

I have a folder on a Windows 2003 server that I would like to share.

Do I need to set the permissions in Security, or Share>Permissions, or both?

And which ones take precedence?
0
Comment
Question by:kam_uk
3 Comments
 
LVL 17

Assisted Solution

by:Andres Perales
Andres Perales earned 100 total points
Comment Utility
You need to set both, Share Permissions set to everyone full, then lock it down using the permission with the security tab...
the restrictive permissions alway take priority.
0
 
LVL 95

Accepted Solution

by:
Lee W, MVP earned 200 total points
Comment Utility
The most restrictive settings win.

Because of that and for simplicity, you would generally only use NTFS permissions (Security).

Think of it like this:
The share is the doorway into the files and folders at that point.  Like large office building, once you get into the doorway, you have the ability to see EVERYTHING in EVERY OFFICE (through share level permissions

With NTFS permissions, you can adjust things at the FILE level (including the folders) so that Doors 1, 3,4 7,9,10, and 12 are only accessible to user A while user B sees 2,3,5,6,7,9,11,12 and User C sees everything.

To put another way, if you set NTFS permissions to EVERYONE:Full access, and share permissions to READ ONLY then your users ONLY have READ ONLY (It's the most restrictive)

If you set NTFS permissions so that EVeryone has Read Only except for you and your boss with FULL access but set the Share permissions to Read Only, then you and your boss STILL have read only - the share permissions are more restrictive.

If you set NTFS permissions so that EVeryone has Read Only except for you and your boss with FULL access but set the Share permissions to Full Access, then you and your boss have Full access and everyone else has Read Only.

Finally, If you set NTFS permissions so that EVeryone has Read Only to everything except the file "phonelist" which allows FULL access but set the Share permissions to Read Only, then NO ONE can modify the phone list because the share permissions are more restrictive
0
 
LVL 3

Author Comment

by:kam_uk
Comment Utility
Thanks!
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now