share permissions

[Mark]

if i right click on a share on my machine and select properties, under the
sharing tab is a permissions button. what is the difference between setting
permission under this button and setting permissions under the security tab?
if i allow another user on my network access (full control) to this share
using the permissions button on the sharing tab how does this differ than if
i just added this user under the security tab and give them full control?
seems like the same thing.

thanks.

 

[Brandon Baker]

Share permissions are just that, share permissions. They apply to shares and
not the files inside them. When you set security settings under the security
tab that is ntfs security setttings. Just to let you know it is common to
give authenticated users full control share permissions, then give the users
or security groups you actually want to have access to the share and what
rights you want them to have under the security tab. Take a look at this.

http://infocenter.cramsession.com/articles/files/share-versus-ntfs-permiss-9162003-1702.asp

 

[Roger Abell]

The NTFS permissions (what you called the Security tab) apply
for all accesses to the filesystem. The share permissions apply
only to over-the-wire access to the filesystem. If NTFS grants
greater permission to a principal than does the share level grants,
then over-the-wire access is reduced to what the share permissions
specific (they act as an upper limit). If share permissions grant
more than the principal is allowed by the NTFS permissions the
principal will only be allowed what the NTFS permissions state.

 

[Brandon Baker]

Thanks for making that a little more clear. So basically the most
restrictive permission is used, when over the wire. Also, NTFS can be used
at the file level where share can't.

 

[Roger Abell]

Thanks for making that a little more clear. So basically the most
restrictive permission is used, when over the wire.

effectively yes

Also, NTFS can be used
at the file level where share can't.

?? both are applied to determine whether file access is
or is not allowed - when over the wire