Re: Full Share Permission

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Steve Foster [SBS MVP] (steve.foster_at_picamar.co.uk)
Date: 02/14/05 

Date: Mon, 14 Feb 2005 06:32:50 -0800

mjs1138 wrote:

> OK... If I understand this right this statement should be correct: The
ONLY
> advantage of Share Full-Control is that if I happen to have the NTFS
change
> permission on a file/folder in the share, I can then change my NTFS
> permissions on that file/folder. Or to put it another way the only
purpose of
> Share Full-Control is to allow the exercise of NTFS change. Is that
correct?
> Did Full-Control only come into existence after NTFS or does it have a
> different purpose in FAT disks?
>

FAT partitions have no security of their own. Therefore the only security
on a FAT partition accessed by network share is that enforced by Share
permissions.

In that context, Full Control is equivalent to Read + Change.

Another way to look at the Share permission Full Control is that this
effectively leaves all security matters to the underlying file structure
security implementation. Users can do anything with the share that they
can do if accessing the underlying folders directly (ie from the machine
hosting the share). 

-- 
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.

Relevant Pages

  • Re: Corrupt mp3s problem
    ... Only if they have permission to do so. ... Even XP Home, while it has some of the security GUI removed, still has ... The FAT file system is intrinsically insecure, & NTFS isn't much better. ... I have an NTFS password scrub disk as well. ...
    (rec.audio.pro)
  • RE: Lost permission tab
    ... Did you remember to format to NTFS. ... permission over the different files and folders to the local users. ... Thinking About Security Training? ...
    (Security-Basics)
  • Re: restricted access to one page
    ... Security attributes are down to a file, and NTFS ... permission apply too. ... > one page of my web site (You would have to post a user ...
    (microsoft.public.security)
  • Re: cloning /reseal process clonges the user priviliege
    ... nothing suspecious as far as NTFS permission settings. ... file BEFORE the cloning and AFTER the cloning. ... setting has been reset back to "do not show hidden files and folders" ...
    (microsoft.public.windowsxp.embedded)
  • Re: Corrupt mp3s problem
    ... If the normal user starts the mp3 player, it runs with their UID and does not have permission to alter other users files. ... Most Windows users, if not forced to do otherwise by their sysadmin, log on as an administrator, because some fairly common programs can't run in a restricted user account. ... I've got legitimate access to a program to recover any and all passwords on any NTFS file system I use & it only takes a minute or two to run. ...
    (rec.audio.pro)