The most restrictive one wins. In your example the share permissions would
win if the folder was accessed over the network. If the user was logged on
locally they would have access. For this reason it is usually the best
practice to use NTFS (Security) permissions to set the security. There's a
pretty good explanation of how it works here:
http://channels.lockergnome.com/it/a...th_share.phtml
As the article mentions things can get confusing very quickly if you have
more than a few users and you have a of mix users and groups in the
permissions. It is best to only use groups not users when assigning
permissions. If it's a small home network I don't know if I'd bother setting
up groups but even then it could be useful. For instance you might want to
set different levels of permissions for Adults, Children, and Visitors. As
children get older or visitors become residents you just change their group
membership and don't have to worry about finding all the folders and
changing permissions.
--
Kerry
MS-MVP Windows - Shell/User
Martin Caldwell wrote:
> When I want to setup a folder sharing there is a button "Permissions"
> on the "Sharing" tab. After clicking it I can enter e.g. "Everyone
> Allow full control=yes".
>
> However on the tab "Security" there is a similar entry "Everyone
> Allow full control=yes" too.
>
> So what is the difference between the settings ?
>
> What if I disable full control for everyone in "Share permissions"
> but enable it in "Security" (or vice versa) ? Which has priority?
>
> Martin