best practices on setting up shared folders...

[Darren D]

Hi All
I have a number of network users that I would like to begin by setting up
users shares , however I have read that share permission should not be use
for a number of reason e.g replication - shared permission are not
replicated or auditing- you cannot audit file shares permission etc.. as a
result I would like to used NTFS permission to lock down my shares..
Let say .. user A is the only account with the exception of administrators
that should have access to a shared folder .. here is how I have configure
the share..
On the share I have set shared permissions to allow full control to the
everyone group then on the NTFS permission I have set User A with change
permissions and Domain admins - full control..
Is this correct ?

Thanks
-Darren

 

[Pegasus \(MVP\)]

Hi All
I have a number of network users that I would like to begin by setting up
users shares , however I have read that share permission should not be use
for a number of reason e.g replication - shared permission are not
replicated or auditing- you cannot audit file shares permission etc.. as a
result I would like to used NTFS permission to lock down my shares..
Let say .. user A is the only account with the exception of administrators
that should have access to a shared folder .. here is how I have configure
the share..
On the share I have set shared permissions to allow full control to the
everyone group then on the NTFS permission I have set User A with change
permissions and Domain admins - full control..
Is this correct ?

Thanks
-Darren

This is correct. You must also assign full control to "System" - this is
the account used by Windows 2000 for its housekeeping tasks.

When you move a bit further and set up shares for a whole group
(e.g. "Finance", "HR"), make sure to assign access permissions to
groups, never to individuals. If you assign permissions to individuals
then you will have a rare time adjusting things when staff move on.