Security tab vs. Permissions tab on a share

[Guest]

Could someone give me a basic description of how the permissions tab and the
security tab work together (if they do) and the main differences of the two?
For example when "everyone" is listed under permissions, changing users and
groups under security seems to have no effect. Or if a user is under
permissions and not present in the security tab computers in the network can
still have access. Is one local policy and one network policy? I'm confused.
I can and have made this all work with trial and error but I would like to
understand how it's happening. Thanks in advance.

Jarrett

 

[Guest]

I should be more clear the permissions is actually a button under the sharing
tab.

 

[Lanwench [MVP - Exchange]]

I should be more clear the permissions is actually a button under the
sharing tab.

Share permissions trump NTFS security permissions, in that if you assign
full control via NTFS to a group, but that group or everyone is set with
read only at the share level, they'll get the more restrictive privileges of
read-only -- most people just set share permissions to everyone=full control
to keep things simple, and then assign the granular permissions in the NTFS
security settings.

Hope that's clear...

 

[Hans-Georg Michna]

Could someone give me a basic description of how the permissions tab and the
security tab work together (if they do) and the main differences of the two?
For example when "everyone" is listed under permissions, changing users and
groups under security seems to have no effect. Or if a user is under
permissions and not present in the security tab computers in the network can
still have access. Is one local policy and one network policy? I'm confused.
I can and have made this all work with trial and error but I would like to
understand how it's happening. Thanks in advance.

Jarrett,

the object permissions are valid for local and network access.
The share permissions are an additional barrier for network
access.

To access an object through the network, the user needs both
permissions at the same time.

Hans-Georg

 

[Ron Lowe]

Could someone give me a basic description of how the permissions tab and
the
security tab work together (if they do) and the main differences of the
two?
For example when "everyone" is listed under permissions, changing users
and
groups under security seems to have no effect. Or if a user is under
permissions and not present in the security tab computers in the network
can
still have access. Is one local policy and one network policy? I'm
confused.
I can and have made this all work with trial and error but I would like to
understand how it's happening. Thanks in advance.

Jarrett

There are 2 different bouncers standing at the door,
and you need to get past both of them.

The Share permissions define who can access that share via the network.

The Security tab defines at a finer level *on the disk itself* who can
access individual folders and files.

Someone sitting down at the local machine needs to have NTFS permissions to
access folders and files on the disk.

Someone accessing the same thing across the LAN needs both share permissions
AND NTFS permissions.