Permissions

G

Guest

Windows XP Resource Kit, Configuring Shared Folder Permissions in Chapter 6
states:
To restrict access to a folder, use shared folder permissions or NTFS
permissions, but not both. The best practice is to share a folder so that the
Everyone group has Full Control, and then restrict access to the folder using
NTFS permissions. To me, these 2 sentences contradict each other.
The first says 'not both', the second says best practice is to use both. Can
anyone explain this?

Thank you
 
M

molsonexpert

RC said:
Windows XP Resource Kit, Configuring Shared Folder Permissions in Chapter 6
states:
To restrict access to a folder, use shared folder permissions or NTFS
permissions, but not both. The best practice is to share a folder so that the
Everyone group has Full Control, and then restrict access to the folder using
NTFS permissions. To me, these 2 sentences contradict each other.
The first says 'not both', the second says best practice is to use both. Can
anyone explain this?

Thank you

Bad wording. What it's saying is to set the share permissions to Full
Control and never change it. Then use NTFS permissions to set your desired
security. When 'adding' share and NTFS permissions the most restrictive
always takes precedence. In this scenario, the NTFS permissions will always
be the effective permissions (inheritance notwithstanding). You'll have
better control, and when you need to troubleshoot you'll always be able to
eliminate share permissions as a possible problem.

steve.
 
G

Guest

Your wording makes more sense! Thank you.

molsonexpert said:
Bad wording. What it's saying is to set the share permissions to Full
Control and never change it. Then use NTFS permissions to set your desired
security. When 'adding' share and NTFS permissions the most restrictive
always takes precedence. In this scenario, the NTFS permissions will always
be the effective permissions (inheritance notwithstanding). You'll have
better control, and when you need to troubleshoot you'll always be able to
eliminate share permissions as a possible problem.

steve.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top