The share permissions on our file server shared folders are quite heterogeneous. In particular, some seem to have been set up to mimic the NTFS permissions of the share.

I know that the default share permission are read only for EVERYONE.

I have also read an article that suggests that the best practice is to configure share permissions with Authenticated Users having Full Control.

Assuming I make sure that the NTFS permissions are sufficiently secure for these shares, is that what you would recommend for new/existing shares?

  • 1
    Yes. Yes it is.
    – joeqwerty
    Jul 1, 2011 at 21:19
  • Thats how I manage all of my windows shares. Jul 1, 2011 at 21:37
  • Oh, no... not this discussion again. Please! Jul 1, 2011 at 22:03
  • @Evan - sorry if I'm being repetitive - I did search this site first
    – zen
    Jul 1, 2011 at 22:06
  • 2
    @zen: No need to apologize. There was a fairly long discussion about this just a few days ago at: serverfault.com/questions/282098/… Jul 1, 2011 at 22:14

1 Answer 1


Share permissions function as a filter on the NTFS permissions They take away what the NTFS perms give. The reasons why you want to do that are pretty rare, so setting the share perms as max permissive and doing everything else as a file system right is just fine and simpler.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.