patriots
asked on
Is there any way to exploit a windows share when NTFS permission restrict it?
Simple question:
If a Windows Share is set up with the permission Everyone - Full Access, and only the Domain Admins group is configured as having access to the folder through NTFS permissions, is there any way that share then becomes a security vulnerablity?
Windows server management 101 has always dictated that share vs NTFS = the most restrictive permission always applies. that being the case, I wouldn't think it would matter from a security perspective what the share permission is set to as long as the folder's access is restricted by NTFS.
Historically, you always hear about how Windows shares open up security holes, however, I've never understood why it matters as long as NTFS is restricting access. i want to make sure I'm not missing something...
If a Windows Share is set up with the permission Everyone - Full Access, and only the Domain Admins group is configured as having access to the folder through NTFS permissions, is there any way that share then becomes a security vulnerablity?
Windows server management 101 has always dictated that share vs NTFS = the most restrictive permission always applies. that being the case, I wouldn't think it would matter from a security perspective what the share permission is set to as long as the folder's access is restricted by NTFS.
Historically, you always hear about how Windows shares open up security holes, however, I've never understood why it matters as long as NTFS is restricting access. i want to make sure I'm not missing something...
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
The only way you could say that the open Share is a danger with NTFS locked down is if somehow NTFS security is compromised, and if that happens, then all bets are off and you could then access any part of the system regardless of share permission status.