Solved

share ACL only set at one level

Posted on 2013-06-10
3
462 Views
Last Modified: 2013-06-10
Am I right in thinking share access control permissions are only set at one level? Whereas NTFS are set at every directory level (albeit they can inherit).

And part 2) am I right in thinking if a user or group is NOT listed on share permissions (ACL), regardless of whether they are on NTFS (directory ACL) they cant access data on the directories on that share, i.e. you need to be on both the share and directory ACL?
0
Comment
Question by:pma111
  • 2
3 Comments
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
ID: 39234197
Both right. Share permissions are for the share, not for the folders below. 2nd is right because the principle behind it is "effective is what is more restrictive"
0
 
LVL 3

Author Comment

by:pma111
ID: 39234257
I assume windows effective permissions feature, i.e.:

http://www.techotopia.com/images/5/51/Windows_server_2008_effective_permissions.jpg

Is only taking into consideration NTFS (directory permissions) and completely ignores share permissions?
0
 
LVL 53

Expert Comment

by:McKnife
ID: 39234267
Correct.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now