Re: Sharing Tab vs. Security Tab

"PM" <PM@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:276DCBD8-C163-4469-AECA-5E10809856C1@xxxxxxxxxxxxxxxx 
I understand the general differences between the two tabs for Windows 2000
Server, but would like some advice.

I'll use a USERS share for an example. If I have d:\users, with subfolders
under 'users' for indivudual users, should the USERS folder be shared to
everyone - full control? What should the security tab have in it? I
understand that each sub folder should NOT be shared, and the security tab
should have the individual account listed.

My big question is: The security tab inherits permissions from the root D:
drive.  Should I block this inheritance?

Thanks

Ok, the basic difference between share permissions and local (NTFS) permissions is that the first one applies to users accessing a resource from the network, while the latter one applies when the user has a direct access to computer (e.g. when you yourself sit in front of it).

Regarding blocking/unblocking inheritance - it all depends what you are trying to achieve. If you want to limit access only to certain users, then go ahead and block it.

One more thing to remember about combining share and local permissions: a combination of them applies where the most restrictive takes precedence. For example, if you give Full Control permission on the local level and Read permission on the share, the result for someone accessing it over the network will be Read access. Of course, if the person sits in front of the computer he will get Full Control.

--
Arek Iskra
MVP for Windows Server - Software Distribution


.

Relevant Pages

  • Re: Need Help RE: NTFS
    ... I'm trying to create a share on our W2k3 network. ... so lets say I have this NTFS Folder structure: ... control what files get published and controls who can have access). ... who can place files in specific folders via NTFS permissions. ...
    (microsoft.public.windows.server.general)
  • Re: FileIOPermissions issue - howto fix?
    ... In the .NET CAS security manager, doesn't really matter what user permissions you ... have on that network share, the code-origin is queried first and it is LocalInternet ... > control and edit/save capabilities) disappears from the main form. ...
    (microsoft.public.dotnet.security)
  • Re: Sharing Folders
    ... everyone full control to a network share, ... give "domain users" full control on permissions and full ... permissions and read only on security. ...
    (microsoft.public.windows.server.sbs)
  • Re: Restrict Users from Installing programs
    ... > I use a windows 2000 Professional on a small network in a ... > installing any programs on theeir computers. ... Second user permissions to control WHERE the user can ...
    (microsoft.public.win2000.networking)
  • Re: Shared permissions vs. security
    ... system full control as it would have by default. ... write, delete, and change permissions. ... permissions only apply when a use accesses a share via the network. ... Folder/ntfs permissions apply to a local logon or network access. ...
    (microsoft.public.win2000.security)