The share permissions on our file server shared folders are quite heterogeneous. In particular, some seem to have been set up to mimic the NTFS permissions of the share.

I know that the default share permission are read only for EVERYONE.

I have also read an article that suggests that the best practice is to configure share permissions with Authenticated Users having Full Control.

Assuming I make sure that the NTFS permissions are sufficiently secure for these shares, is that what you would recommend for new/existing shares?

| improve this question | | | | |
  • 1
    Yes. Yes it is. – joeqwerty Jul 1 '11 at 21:19
  • Thats how I manage all of my windows shares. – ErnieTheGeek Jul 1 '11 at 21:37
  • Oh, no... not this discussion again. Please! – Evan Anderson Jul 1 '11 at 22:03
  • @Evan - sorry if I'm being repetitive - I did search this site first – zen Jul 1 '11 at 22:06
  • 2
    @zen: No need to apologize. There was a fairly long discussion about this just a few days ago at: serverfault.com/questions/282098/… – Evan Anderson Jul 1 '11 at 22:14

Share permissions function as a filter on the NTFS permissions They take away what the NTFS perms give. The reasons why you want to do that are pretty rare, so setting the share perms as max permissive and doing everything else as a file system right is just fine and simpler.

| improve this answer | | | | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.