Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 222
  • Last Modified:

Remove share associated permissions before deleting share

Hello All,

me and co-worker have a bet to settle.

what happens if you delete a share before removing the associated permissions to that share? Does it affect anything? More importantly how does one tell if this has been done.
0
dfahie
Asked:
dfahie
  • 4
  • 3
1 Solution
 
Frosty555Commented:
In Windows there are two different types of permissions and you have to be explicitly clear about which one you're talking about:

1) Share permissions, accessed by going to Properties->Sharing->Advanced Sharing->Permissions

2) Windows folder ACL, accessed by going to Properties->Security

When you delete a shared folder, the Share permissions are deleted along with it.

Windows Folder ACLs will remain.
0
 
dfahieAuthor Commented:
okay,

there is a home drive of a user that was created > right click new foler > user name > right click properties > sharing >share this folder ? type in the username with $ > hit permissions in that same window > add user with permissions.

then rigt click on the folder and go to properties > security > add same user..

so I told that is I  just right click on the home drive and delete it, there will be no trace of it?

I believe there is a way to find out if you did not remove the share permissions of that home drive before deleting it...

If this is the case then how can you tell?
0
 
dfahieAuthor Commented:
where would you go to see the ACL permissions that remaind if the folder was deleted? My impression would be there would be no where to look as the folder has been deleted.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
Frosty555Commented:
The dialog box you're talking about (where you go to Right click->properties->sharing->share this folder), is just a friendly wizard that populates the "Advanced Sharing" section for you.

If you delete the entire folder the ACLs and the folder share permissions are both deleted along with it.The only way to recover that information that I know of is if you were to successfully undelete the folder using data recovery software.

If you just turn off sharing, then just the folder share permissions are deleted, but the ACLs remain (because the folder still exists).
0
 
dfahieAuthor Commented:
I agree,

there is a another system admin that told one of my other system admins that he noticed the share was deleted before the permissions were removed. He advised that you have to remove the permissions first, then delete the share. My question is how did he know that the other system administrator just deleted the share opposed to removing the permissions then deleting it... since the share is gone. I really do not think he did a restore,

Is there a log somewhere?
would there be something in the event log complaining about the permissions?

It just bothers me cause he will not tell us. I know he is not monitoring us cause he was unsure which of the 4 did it as they all use their own accounts, so that rules that out.

I want to know for myself as I like to share info.
0
 
Frosty555Commented:
I couldn't tell you 100% that there is NO evidence anywhere on the system of the existence of the share. Perhaps there are some event logs or metadata elsewhere on the system that might allude to the shared folder's existence and could be used to forensically determine if the share existed or what it's permissions were.

.... but it definitely doesn't matter for any practical reason. There certainly is no practical difference between delete the share permissions first before deleting the folder vs just deleting the folder. When Windows deletes the folder it unshares it as part of the process of deleting the folder. The end result is exactly the same.

The admin isn't making any sense to me, it sounds like he's fussing over nothing. Or maybe I'm not hearing the whole story.
0
 
dfahieAuthor Commented:
I think you are right, he is fussing over nothing. I did talk to him and it took some time to get it out of him but how he found out was when he rebooted the server, it tried to map the share on boot up and then is when it started to complain.. I cannot see this happening but I could be wrong. Does this make sense?
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now