RE: Recommended Permissions for Application Folder / share

Hi Ed,

Thank you for posting in SBS newsgroup.

As I know, normally we can configure NTFS permissions and the Sharing
permissions to the Users Shared folder as following:

NTFS permissions:

Domain Admin: Full Control
Domain Users Special - Apply onto "This folder and files" -Allow: Traverse
Folder/Execute Files, List Folder/Read Data, Read Attributes, Read Extended
Attributes, Create Folders/Append Data, Read Permissions
System: Full Control
SBS Folder Operators: Full Control

Sharing permissions:

Domain Admins, Domain Users, SBS Folder Operators: Full Control

NTFS permissions for the individual Users Folder:

Domain Admin Full Control (Inherited)
System Full Control (Inherited)
SBS Folder Operators Full Control (Inherited)
Individual user Full Control (Not Inherited)

For detailed configuration, you can refer to the following documents:

Access Control How To...
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serve
rHelp/e8854fff-2f01-454a-9d94-6557b4f45a4f.mspx

User Rights Technical Reference Topics
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/techref/useri
gt.mspx

325361 How To Configure Security for Files and Folders on a Network in
Windows
http://support.microsoft.com/?id=325361

I am appreciated your time and look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Recommended Permissions for Application Folder / share
| From: =?Utf-8?B?RWRH?= <EdG@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: Recommended Permissions for Application Folder / share
| Date: Thu, 16 Feb 2006 10:21:30 -0800
| | Newsgroups: microsoft.public.windows.server.sbs
||
| Hi All,
|
| Just setting up a new SBS 2003 server.
|
| I want to set up an (APP) application folder structure under which
certain
| programs will get installed. These programs will be "executable" users
| logging into the server domain from their workstations (as well as a
local
| login).
|
| The logged in users need to be able to have a shortcut to the programs
| living under the application directory.
|
| Can someone recommend what the NTFS folder permissions (and share
| permissions?) should be on this APP directory?
|
| Thanks.
| Ed
|

.

Relevant Pages