Solved

share and security permissions on shared folder

Posted on 2014-12-08
5
1,133 Views
Last Modified: 2014-12-09
I have a shared drive permissions to it where reset by accident
When I check share permissions I have
Groupname File Access - Contribute
Groupname File Admin - Read/Write

In ADVANCED SHARE permissions,I have none,but before I think there was
Everyone - Full
Administrators - Full

In Security I have
Groupname File Access - Modify
Groupname File Admin - Full

1.What exactly Contribute means and where did it come from
2.Will security permissions take over share permissions or vice versa
3.what is more advisable for share permissions - use network share or advanced network share permissions

Thank you
0
Comment
Question by:Vadim Mikhal
5 Comments
 
LVL 24

Expert Comment

by:NVIT
ID: 40488005
do you have sharepoint?
0
 
LVL 77

Expert Comment

by:arnold
ID: 40488069
Share permissions deal with external rights access that are then sa ordinate the security settings.
I.e. The sharing permissions all everyone full access, the settings on the security is what will control access.
You have to deal with them together. In any instance, the more restrictive rule will control.

What is this device, contribute is a group presumably within group/user management interface you have this group and can see who the members of this group are.
0
 
LVL 24

Accepted Solution

by:
VB ITS earned 250 total points
ID: 40488227
1.What exactly Contribute means and where did it come from
Can you please post a screenshot of the window where you are seeing this Contribute access level? I don't recall seeing this level of access anywhere when configuring sharing permissions on folders in Windows Explorer.
2.Will security permissions take over share permissions or vice versa
Yes but whichever permissions that is the most restrictive of the two will apply. Have a read of this article for further information on NTFS vs Sharing permissions: http://technet.microsoft.com/en-us/library/cc754178.aspx
3.what is more advisable for share permissions - use network share or advanced network share permissions
I would grant your users Full Control in the Sharing permissions then limit their access using the NTFS permissions as accordingly.
0
 

Author Comment

by:Vadim Mikhal
ID: 40488927
Uploaded screenshot
Another question,VB
Does it make sense to have both simple (as shown on attached pic) and advanced share permissions
permissions5.jpg
0
 
LVL 6

Assisted Solution

by:Asif Bacchus
Asif Bacchus earned 250 total points
ID: 40489863
The 'simple' permissions are just a more user friendly display of the advanced permissions.  The advanced permissions are the actual permissions and allow for more granular control.  Read/Write is self-explanatory, as is owner and Full Control.  Contribute is basically 'Write' but without 'Modify'.  So the user can create new files but cannot modify existing ones (and cannot, therefore, delete or rename).

You can set your permissions via 'Simple' or 'Advanced' but I usually recommend using Advanced since you know exactly what your are defining.  

That being said, NTFS (i.e. file system) permissions ALWAYS trump share permissions.  When you set share permissions, you'll see corresponding entries created on the file-system.  However, any NTFS permissions set on the object will ALWAYS win over share permissions.  That is why most people suggest 'Full Access' on the share and then restrict as appropriate via NTFS.

HTH.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Windows Updates question 2 30
SBS 2011 Backup Drive 8 26
Windows 7 Professional 6 57
Windows 10: how to eliminate the lock screen at boot 5 29
OfficeMate Freezes on login or does not load after login credentials are input.
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question