Re: share level & ntfs permissions

Tech-Archive recommends: Fix windows errors by optimizing your registry


"John Smith" <someone@xxxxxxxxxxxxx> wrote in message
news:OQQK91jRGHA.5924@xxxxxxxxxxxxxxxxxxxxxxx
Hi all,
I'm attempting to do my lab but i've run into a problem with Share Level
and
NTFS File permissions.

Here's my setup
1. One domain, with one domain controller that hosts DNS, DHCP, and File
Server Services (Contoso.Com).
1. One XP PRO SP2 Client Machine

Now the book says, "Share level permissions should be used in conjunction
with NTFS permisssions, not instead of them. The 2 levels of security work
together. Users who access the share will have a combination of the more
restrictive permissions that have been set."

I setup my Test user account with a share level permission of Read, and
the
NTFS file permission FUll Control. When i login to my domain from the XP
Pro
client, and access the resource i'm still able to delete, and change
anything in the folder when i should only be allowed to read. Inheritance
is
setup properly, but the effective permissions show FULL Control for
resource
that i'm trying to access for the test user account. What am i doing wrong
??

I don't know what book you quote but most sysadmins will
set the share permissions to "Full Control" for everyone and
set appropriate NTFS permissions. I see no advantage in
having two permission schemes that will possibly contradict
each other. Furthermore, NTFS permissions are so much more
powerful than share permissions!


.

Relevant Pages

  • Re: Security on inetpub/wwwroot
    ... I have it setup as a Share and also the NTFS permissions. ... workstation I can not write to it... ... I have an Exchange Server that is setup with IIS and ASP running. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Permissions
    ... and the /WINNT directory and such give users more permissions. ... keys dll, etc... ... to install or chnage anything is to make the systems and network run ... >> then just setup the access that program needs, ...
    (Security-Basics)
  • Administrator/Limited User security issues
    ... heres a run down on how the computer is setup... ... folders for testing the security. ... permissions but the admin. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Location for Data Files
    ... I realize the setup always runs as admin, ... NTFS permissions for specific users. ... But he cannot change folder permissions unless he has the rights ...
    (microsoft.public.vb.general.discussion)
  • Re: Tell Me Where To Stick It!
    ... the problem of limited permissions to whatever extent ... folder with r/w/x permissions for all. ... Unfortunately, my installer, Setup Factory 8, does not provide a way to ... requestedExecutionLevel=asInvoker manifest, virtualization is disabled. ...
    (microsoft.public.vb.general.discussion)