Share permissions and Security tabs

Share permissions and Security tabs

When I open a Share properties, I can see Share Permissions tab and Security tab.

I would like to know if permissions given at the Security tab are considered NTFS permissions even when it is considered a Share ?

The way we used to do it at the company I worked for in the past, was granting Full Permissions to Domain Users under the "Share Permissions" tab, we did not touch anything under "Security" tab.

However at the folders level which are inside the Share, we'll go under the "Security" tab and grant permissions there(NTFS permissions).

Anyone to make it clearer ?

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
Share Permissions are Share Permissions. Security Tab is NTFS permissions. This does not matter if this is a Shared Folder or not. Security Tab is NTFS permissions.

Share Permissions need to be set to Full For Everyone and then you limit the permissions using the Security Tab (NTFS Permissions).

As you have stated.

Jeff RodgersNetworks & Communications Systems ManagerCommented:
NTFS permissions are applied locally to a file or folder using the security tab.   These apply to all files/folders.

Share permissions are permissions applied to a folder viewed across the network only.   They do not apply to someone who has local physical access to the drive ( for example they are not applied if you are logged into the machine directly.)

When accessing a file from across the network,  the most restrictive permission is the permission that is applied.  (For example if the Share permissions are set to Read and the NTFS permissions are set to Full Control,  the most a person can do is Read when accessing from the network)

Clear as mud?
jskfanAuthor Commented:
The Old way was to give Full permission on the Share ( However I do not remember if the Share had a Security tab on its properties.
we used to create folders inside of the Share and assign NTFS permissions there.
That way there will be no default NTFS inheritance from the Share, all NTFS permissions are controller at each folder level.
Alan HardistyCo-OwnerCommented:
In case the above comments aren't clear (which may be why this Q is now showing as Neglected), I'll add my £0.02 worth.

Share Permissions are set to allow easy access to map a drive to the share.

Any user with a Mapped Drive to the specific share, if they have Full Control on the Share, then they can (if the NTFS permissions are also Full Control), create files / folders, delete files / folders and do whatever they like as they have complete control on the files / folders.

If they have Read-Only permissions set on the Share Permissions, then no matter what NTFS file permissions they are given (even if they have Full Control), they will only be able to Read the files and not modify them.

Likewise, if they have Full Control on the Share Permissions and Read-Only on the NTFS permissions, then they will only be able to Read files but they won't be able to modify or delete them because of the NTFS permissions.

The Maximum Share Permissions sets the Maximum File permissions they are able to receive and the NTFS permissions can further restrict access (or take it away) if they start with Full Access via the Share but only have Read-Only NTFS permissions.

Does that make more sense?


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jskfanAuthor Commented:
Thank you Guys!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.