NTFS Permissions Question

[Guest]

I have a D drive on the server, with a few subfolders for user shares,
Quickbooks share, etc..

I blocked inheritance , and created appropriate permissions, ex. Quickbooks
share - Administrators full control, Quickbooks users full control.

My question is: What about the SYSTEM group? The default D share gave it
and all subfolders permissions to the folders by default. However, I blocked
inheritance, and am not sure if I should add the SYSTEM group to my shares or
not! What does the SYSTEM group mean, and what is its purpose?

 

[Jeff Cochran]

I have a D drive on the server, with a few subfolders for user shares,
Quickbooks share, etc..

I blocked inheritance , and created appropriate permissions, ex. Quickbooks
share - Administrators full control, Quickbooks users full control.

My question is: What about the SYSTEM group? The default D share gave it
and all subfolders permissions to the folders by default. However, I blocked
inheritance, and am not sure if I should add the SYSTEM group to my shares or
not! What does the SYSTEM group mean, and what is its purpose?

There are a number of programs that can/will use the SYSTEM account
for access. Backup software is the first that comes to mind, but it
could be you have other software that may.

Jeff

 

[Roger Abell]

You should be OK without this grant to SYSTEM, particularly
given that you do have a grant of FULL to Administrators group.
The Local System account that the core of the OS runs as is in
fact a hidden member of the Administrators group.
Grants to SYSTEM can become particularly important where
Adminsitrators have no access by specific services running
in the OS will be attempting file accesses.