Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 144
  • Last Modified:

setup share and NTFS permissions.

setup share and NTFS permissions.

I have \\Servername\Share\Folder1\folder2\folder3

If I want to give user full control to anything under folder3. How should I grant Share and Folder permissions. Do I need to give full control on the Share and Full Control on Folder3 or Should I also go to each folder [folder1,folder2] and give read permissions ?

Thank you
0
jskfan
Asked:
jskfan
  • 6
  • 4
  • 2
2 Solutions
 
*** Hopeleonie ***IT ManagerCommented:
I make the shares very simple. Just give everyone or authenticated users full permission in the shares.

Shares example
Do I need to give full control on the Share and Full Control on Folder3 or Should I also go to each folder [folder1,folder2] and give read permissions ?
No

And under NTFS best practice is not to give Full Control to any user. Just grant all other permissions to that folder and subfolders (via inheritance).

NTFS example
0
 
jskfanAuthor Commented:
And under NTFS best practice is not to give Full Control to any user. Just grant all other permissions to that folder and subfolders (via inheritance).

What do you mean in regards to my scenario ?
0
 
*** Hopeleonie ***IT ManagerCommented:
Have you worked with NTFS and stuff like inheritance before?

I would also read this:
http://www.basvankaam.com/2013/06/15/share-vs-ntfs-permissions/

I personally would not give Full Control to any user. Just create the permissions like here:
https://filedb.experts-exchange.com/incoming/2016/10_w41/1120644/NTFS.JPG
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
David Johnson, CD, MVPOwnerCommented:
\\Servername\Share\Folder1\folder2\folder3

If I want to give user full control to anything under folder3. How should I grant Share and Folder permissions. Do I need to give full control on the Share and Full Control on Folder3 or Should I also go to each folder [folder1,folder2] and give read permissions ?
What permissions do you want for share, folder1 and folder2? If NONE then create a new share
0
 
jskfanAuthor Commented:
David Johnson, CD, MVP

I want to give user Full Control on anything under Folder3
\\Servername\Share\Folder1\folder2\folder3
If I remember cases like that in windows 2000, we used to give Traverse permissions to user on Folder1 and Folder2

for instance:
Share : Full Control
Folder1:Traverse
Folder2: Traverse
Folder3: Full Control
0
 
David Johnson, CD, MVPOwnerCommented:
Exactly, that is why I asked
0
 
jskfanAuthor Commented:
David Johnson, CD, MVP

However, in older versions like Windows 2000, if I remember when you turn a Folder into a Share, there was no Tab  "Security" showing up on the share. that was probably why we had to go to, ie Folder1, grant Traverse or maybe List Folder, and enable inheritance...Then go to ,ie Folder3. and give the Full Control permissions

Because sometime, you will have to deal with so many subfolders and you do not need to go to each one and grant permissions, ie  \\Servername\Share\Fold1\Foldx\foldxx\foldxxx..........Foldxxxx


With the newer version ,ie windows 2008 and later, when you Share a folder, the Share will also have "Security " Tab, I believe from there you can grant List Folder and enable inheritance.. in addition to the Share permissions where usually you give Full Control


* I am not sure with newer OS versions ,whether there is Traverse permission or it is no longer used
0
 
David Johnson, CD, MVPOwnerCommented:
Advanced Permissionsadvanced permissions tab
0
 
jskfanAuthor Commented:
David Johnson, CD, MVP

If I go to the Share, and Select the Security Tab, and give "Traverse folder /Execute File" and enable inheritance, then I do NOT think I need to go to folder1 and folder2 to do the same. Correct ?
0
 
David Johnson, CD, MVPOwnerCommented:
remember to go to folder3, disable inheritance and set the proper permissions
0
 
jskfanAuthor Commented:
David Johnson, CD, MVP

If I give Full Control at the Share level, then go straight to  Folder 3 and give proper NTFS permission, and disable inheritance. Would that work without:
 Selecting the Security Tab on the Share, and give "Traverse folder /Execute File" and enable inheritance,
??
0
 
jskfanAuthor Commented:
Thank you
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 6
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now