Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

share ACL only set at one level

Posted on 2013-06-10
3
477 Views
Last Modified: 2013-06-10
Am I right in thinking share access control permissions are only set at one level? Whereas NTFS are set at every directory level (albeit they can inherit).

And part 2) am I right in thinking if a user or group is NOT listed on share permissions (ACL), regardless of whether they are on NTFS (directory ACL) they cant access data on the directories on that share, i.e. you need to be on both the share and directory ACL?
0
Comment
Question by:pma111
  • 2
3 Comments
 
LVL 54

Accepted Solution

by:
McKnife earned 500 total points
ID: 39234197
Both right. Share permissions are for the share, not for the folders below. 2nd is right because the principle behind it is "effective is what is more restrictive"
0
 
LVL 3

Author Comment

by:pma111
ID: 39234257
I assume windows effective permissions feature, i.e.:

http://www.techotopia.com/images/5/51/Windows_server_2008_effective_permissions.jpg

Is only taking into consideration NTFS (directory permissions) and completely ignores share permissions?
0
 
LVL 54

Expert Comment

by:McKnife
ID: 39234267
Correct.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Know what services you can and cannot, should and should not combine on your server.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question