Sign in with
Sign up | Sign in
Your question

Share permission ACL's

Last response: in Windows 2000/NT
Share
July 19, 2005 2:11:05 PM

Archived from groups: microsoft.public.win2000.security (More info?)

I know that NTFS DACL's are "stored" as part of the folder or file, but where
are the share ACL's for a folder stored? I changed the share ACL's on a
folder, but the folder's write time did not seem to change, so where are the
permissions kept??

More about : share permission acl

Anonymous
July 19, 2005 8:01:14 PM

Archived from groups: microsoft.public.win2000.security (More info?)

I don't know exactly where they are stored offhand but I don't know why you
would expect the write time to change as either the user would have the
ability to write to the share or not. If your permissions do not seem to
work well then check the membership of the user account that you are using
because a user will end up having the most permissive permission to a share
based on his group membership unless one group/user has deny permission
which will cause a deny for the share. To prevent a user to write to a share
just give him "read" permission for the share or make sure he does not have
write ntfs permission to the folder via group membership or explicit user
account permissions. If you are changing a users group membership then be
sure to log user off and logon again to update his access token with new
group membership before testing access to a share.


"Todd" <Todd@discussions.microsoft.com> wrote in message
news:A735B010-F354-4FCC-A4C7-6CCFA94E6FAB@microsoft.com...
>I know that NTFS DACL's are "stored" as part of the folder or file, but
>where
> are the share ACL's for a folder stored? I changed the share ACL's on a
> folder, but the folder's write time did not seem to change, so where are
> the
> permissions kept??
Anonymous
July 20, 2005 12:52:30 AM

Archived from groups: microsoft.public.win2000.security (More info?)

Share permissions are stored in the registry at
HKLM\System\CurrentControlSet\Services\Lanmanserver\Shares\Security

Oh, and BTW, NTFS Acls are really not stored as part of the file anymore,
thought that was true back at NT4 and earlier.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Todd" <Todd@discussions.microsoft.com> wrote in message
news:A735B010-F354-4FCC-A4C7-6CCFA94E6FAB@microsoft.com...
> I know that NTFS DACL's are "stored" as part of the folder or file, but
where
> are the share ACL's for a folder stored? I changed the share ACL's on a
> folder, but the folder's write time did not seem to change, so where are
the
> permissions kept??
!