Default Shared Folders Permission on XP Pro

[Steve Y. C. Kong]

Hi everybody,

I've read from all the Press books and TechNet that the default shared
folders permission on XP Pro is supposed to be Everyone Full Control,
but it wasn't the case when I tried it; the default was Everyone Read.

I can confirm that it was definitely still Everyone Full Control up to
2000. So is it something that MS didn't update in their documentation
on XP Pro?

Steve

 

[Guest]

Not sure which MS Press books you are reading..

According to WinXP Pro ResKit 2Ed - (chapt 6
"...When a Windows XP Professional-based computer is not joined to a domain, the simple sharing model is fundamentally different than the model used in previous versions of Windows. By default, all users logging on to such computers over the network are forced to use the Guest account; this is called 'ForceGuest'.
.... [if not on a domain] ForceGuest is turned on by default..
... When the Guest-only security model is used, the SHARING tab has only three options:
"Share this folder on the network". Grants the Everyone group READ pemission..
"Share Name". The name of the share..
"Allow other users to change my files" Grants the Everyone group Full Control...

Elsewhere in this book, it states that by default NTFS /volumes/ are set for Everyone to have Full Control

Hope this clears it up for you.

 

[Steve Y. C. Kong]

Hi JoiseyBill,

Thanks for your reply.

Actually, I wasn't talking about simple sharing. In the Resource Kit
(Edition 2) chapter 6, under "Sharing Files and Folders" (P.265), the
default for traditional sharing is Everyone Full Control (at the bottom
of the page). The same thing is mentioned in the training kit as well.
That's why I was confused when I tried it. I knew it was the case up
to and including 2000, but there seemed to be conflicts in XP.

However, I did manage to find the answer last night. The Full Control
default is true if you're running XP without service packs, but as soon
as you apply SP1, the default is changed to Everyone Read. I think this
change was made to be in line with 2003. Check out the following link:

http://support.microsoft.com/default.aspx?scid=kb;en-us;328065&Product=winxp

Sorry to have troubled you.

Steve