Shares vs. Rights

[Mark Bierman]

Can someone please tell me which superceedes which...

The rights that I give out when I create a shared drive vs. the rights that
I give out within the directory structure of that shared drive. Who wins?

e.g. I create a new shared drive when Domain Users have Change & Read right.
Then within that shared drive, I give Domain Users read only rights to a
specific directory.

Will the domain users be able to change a file in that directory because of
the shared drive rights, or did I just limit it by the specific rights
within the directory?

THANKS!

MB

 

[Steven L Umbach]

I am not quite sure about your question, but here goes. There are two types
of permissions, share and ntfs. Share permissions only apply to network
access, while ntfs is always there no matter what kind of logon. If a user
is a member of multiple groups, then the most permissive of any group/user
permission applies unless there is a deny permission applied that generally
always wins except that for ntfs an explicit allow permission overrides and
inherited deny permission.

When both share and ntfs permisions apply to a user, the most restrictive
permission applies. For instance if a user has full controll permisions to a
share but only read for ntfs permission to a file in that share, then the
user ends up with a read permission. Hope that helps. -- Steve

 

[Oli Restorick [MVP]]

Hi Mark

Steven has given you the correct answer in another post.

I just wanted to point out that when you say "rights", we know what you
mean, but that word has a specific meaning in Windows NT operating systems
which isn't anything to do with file permissions.

Regards

Oli