Question about share permissions

[Guest]

I read an article on a windows security web site that recommended that
you set the permission for all shares to allow Full Control to
Authenticated Users (the default is Full Control to Everyone, although
in recent versions of Windows I think they changed it to Read for
Everyone). Allowing Full Control is OK, assuming that the NTFS
permissions are tighter.

But if I have my "Access this computer from the network" user right
set to Authenticated Users instead of Everyone, then even if my share
permissions are set to allow Full Control to Everyone, only
Authenticated Users will have access to my shares, right?

 

[Guest]

I read an article on a windows security web site that recommended that
you set the permission for all shares to allow Full Control to
Authenticated Users (the default is Full Control to Everyone, although
in recent versions of Windows I think they changed it to Read for
Everyone). Allowing Full Control is OK, assuming that the NTFS
permissions are tighter.

But if I have my "Access this computer from the network" user right
set to Authenticated Users instead of Everyone, then even if my share
permissions are set to allow Full Control to Everyone, only
Authenticated Users will have access to my shares, right?

That is correct. The user right is checked before the share/ntfs
permissions.

(replying for future reference)