[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 139
  • Last Modified:

setup share and NTFS permissions.

setup share and NTFS permissions.

I have \\Servername\Share\Folder1\folder2\folder3

If I want to give user full control to anything under folder3. How should I grant Share and Folder permissions. Do I need to give full control on the Share and Full Control on Folder3 or Should I also go to each folder [folder1,folder2] and give read permissions ?

Thank you
0
jskfan
Asked:
jskfan
  • 6
  • 4
  • 2
2 Solutions
 
*** Hopeleonie ***IT ManagerCommented:
I make the shares very simple. Just give everyone or authenticated users full permission in the shares.

Shares example
Do I need to give full control on the Share and Full Control on Folder3 or Should I also go to each folder [folder1,folder2] and give read permissions ?
No

And under NTFS best practice is not to give Full Control to any user. Just grant all other permissions to that folder and subfolders (via inheritance).

NTFS example
0
 
jskfanAuthor Commented:
And under NTFS best practice is not to give Full Control to any user. Just grant all other permissions to that folder and subfolders (via inheritance).

What do you mean in regards to my scenario ?
0
 
*** Hopeleonie ***IT ManagerCommented:
Have you worked with NTFS and stuff like inheritance before?

I would also read this:
http://www.basvankaam.com/2013/06/15/share-vs-ntfs-permissions/

I personally would not give Full Control to any user. Just create the permissions like here:
https://filedb.experts-exchange.com/incoming/2016/10_w41/1120644/NTFS.JPG
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
David Johnson, CD, MVPOwnerCommented:
\\Servername\Share\Folder1\folder2\folder3

If I want to give user full control to anything under folder3. How should I grant Share and Folder permissions. Do I need to give full control on the Share and Full Control on Folder3 or Should I also go to each folder [folder1,folder2] and give read permissions ?
What permissions do you want for share, folder1 and folder2? If NONE then create a new share
0
 
jskfanAuthor Commented:
David Johnson, CD, MVP

I want to give user Full Control on anything under Folder3
\\Servername\Share\Folder1\folder2\folder3
If I remember cases like that in windows 2000, we used to give Traverse permissions to user on Folder1 and Folder2

for instance:
Share : Full Control
Folder1:Traverse
Folder2: Traverse
Folder3: Full Control
0
 
David Johnson, CD, MVPOwnerCommented:
Exactly, that is why I asked
0
 
jskfanAuthor Commented:
David Johnson, CD, MVP

However, in older versions like Windows 2000, if I remember when you turn a Folder into a Share, there was no Tab  "Security" showing up on the share. that was probably why we had to go to, ie Folder1, grant Traverse or maybe List Folder, and enable inheritance...Then go to ,ie Folder3. and give the Full Control permissions

Because sometime, you will have to deal with so many subfolders and you do not need to go to each one and grant permissions, ie  \\Servername\Share\Fold1\Foldx\foldxx\foldxxx..........Foldxxxx


With the newer version ,ie windows 2008 and later, when you Share a folder, the Share will also have "Security " Tab, I believe from there you can grant List Folder and enable inheritance.. in addition to the Share permissions where usually you give Full Control


* I am not sure with newer OS versions ,whether there is Traverse permission or it is no longer used
0
 
David Johnson, CD, MVPOwnerCommented:
Advanced Permissionsadvanced permissions tab
0
 
jskfanAuthor Commented:
David Johnson, CD, MVP

If I go to the Share, and Select the Security Tab, and give "Traverse folder /Execute File" and enable inheritance, then I do NOT think I need to go to folder1 and folder2 to do the same. Correct ?
0
 
David Johnson, CD, MVPOwnerCommented:
remember to go to folder3, disable inheritance and set the proper permissions
0
 
jskfanAuthor Commented:
David Johnson, CD, MVP

If I give Full Control at the Share level, then go straight to  Folder 3 and give proper NTFS permission, and disable inheritance. Would that work without:
 Selecting the Security Tab on the Share, and give "Traverse folder /Execute File" and enable inheritance,
??
0
 
jskfanAuthor Commented:
Thank you
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 6
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now