shared folders best practices**

[Darren D]

Hi All
I have a number of network users that I would like to begin by setting up
users shares , however I have read that share permission should not be use
for a number of reason e.g replication - shared permission are not
replicated or auditing- you cannot audit file shares permission etc.. as a
result I would like to used NTFS permission to lock down my shares..
Let say .. user A is the only account with the exception of administrators
that should have access to a shared folder .. here is how I have configure
the share..
On the share I have set shared permissions to allow full control to the
everyone group then on the NTFS permission I have set User A with change
permissions and Domain admins - full control..
Is this correct ?

Thanks

 

[Chris Guynn]

Hi All
I have a number of network users that I would like to begin by setting up
users shares , however I have read that share permission should not be use
for a number of reason e.g replication - shared permission are not
replicated or auditing- you cannot audit file shares permission etc.. as a
result I would like to used NTFS permission to lock down my shares..
Let say .. user A is the only account with the exception of administrators
that should have access to a shared folder .. here is how I have configure
the share..
On the share I have set shared permissions to allow full control to the
everyone group then on the NTFS permission I have set User A with change
permissions and Domain admins - full control..
Is this correct ?

That would work, although, the generally accepted practice is to put User A
in Group Z and then give group Z the permissions. That way, if User B takes
User A's place, you only have to remove User A from Group Z and add User B
in his place; thereby giving User B ALL of User A's permissions/rights in a
few very easy steps. This is much easier than having to remember all of the
permissions/rights that have been set up for User A.