1

The share permissions on our file server shared folders are quite heterogeneous. In particular, some seem to have been set up to mimic the NTFS permissions of the share.

I know that the default share permission are read only for EVERYONE.

I have also read an article that suggests that the best practice is to configure share permissions with Authenticated Users having Full Control.

Assuming I make sure that the NTFS permissions are sufficiently secure for these shares, is that what you would recommend for new/existing shares?

Improve this question
6
  • 1
    Yes. Yes it is.
    – joeqwerty
    Commented Jul 1, 2011 at 21:19
  • Thats how I manage all of my windows shares.
    – ErnieTheGeek
    Commented Jul 1, 2011 at 21:37
  • Oh, no... not this discussion again. Please!
    – Evan Anderson
    Commented Jul 1, 2011 at 22:03
  • @Evan - sorry if I'm being repetitive - I did search this site first
    – zen
    Commented Jul 1, 2011 at 22:06
  • 2
    @zen: No need to apologize. There was a fairly long discussion about this just a few days ago at: serverfault.com/questions/282098/…
    – Evan Anderson
    Commented Jul 1, 2011 at 22:14

1 Answer 1

Reset to default
5

Share permissions function as a filter on the NTFS permissions They take away what the NTFS perms give. The reasons why you want to do that are pretty rare, so setting the share perms as max permissive and doing everything else as a file system right is just fine and simpler.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .