share permissions

[mark]

Archived from groups: microsoft.public.win2000.security (More info?)

if i right click on a share on my machine and select properties, under the
sharing tab is a permissions button. what is the difference between setting
permission under this button and setting permissions under the security tab?
if i allow another user on my network access (full control) to this share
using the permissions button on the sharing tab how does this differ than if
i just added this user under the security tab and give them full control?
seems like the same thing.

thanks.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Share permissions are just that, share permissions. They apply to shares and
not the files inside them. When you set security settings under the security
tab that is ntfs security setttings. Just to let you know it is common to
give authenticated users full control share permissions, then give the users
or security groups you actually want to have access to the share and what
rights you want them to have under the security tab. Take a look at this.

http://infocenter.cramsession.com/articles/files/share-versus-ntfs-permiss-9162003-1702.asp






"Mark" <mark_kurten@acordia.com> wrote in message
news:%23BjgC%236kFHA.3656@TK2MSFTNGP09.phx.gbl...
> if i right click on a share on my machine and select properties, under the
> sharing tab is a permissions button. what is the difference between
> setting
> permission under this button and setting permissions under the security
> tab?
> if i allow another user on my network access (full control) to this share
> using the permissions button on the sharing tab how does this differ than
> if
> i just added this user under the security tab and give them full control?
> seems like the same thing.
>
> thanks.
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

The NTFS permissions (what you called the Security tab) apply
for all accesses to the filesystem. The share permissions apply
only to over-the-wire access to the filesystem. If NTFS grants
greater permission to a principal than does the share level grants,
then over-the-wire access is reduced to what the share permissions
specific (they act as an upper limit). If share permissions grant
more than the principal is allowed by the NTFS permissions the
principal will only be allowed what the NTFS permissions state.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Mark" <mark_kurten@acordia.com> wrote in message
news:%23BjgC%236kFHA.3656@TK2MSFTNGP09.phx.gbl...
> if i right click on a share on my machine and select properties, under the
> sharing tab is a permissions button. what is the difference between
setting
> permission under this button and setting permissions under the security
tab?
> if i allow another user on my network access (full control) to this share
> using the permissions button on the sharing tab how does this differ than
if
> i just added this user under the security tab and give them full control?
> seems like the same thing.
>
> thanks.
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Thanks for making that a little more clear. So basically the most
restrictive permission is used, when over the wire. Also, NTFS can be used
at the file level where share can't.




"Roger Abell" <mvpNOSpam@asu.edu> wrote in message
news:uYrYDDqlFHA.3380@TK2MSFTNGP12.phx.gbl...
> The NTFS permissions (what you called the Security tab) apply
> for all accesses to the filesystem. The share permissions apply
> only to over-the-wire access to the filesystem. If NTFS grants
> greater permission to a principal than does the share level grants,
> then over-the-wire access is reduced to what the share permissions
> specific (they act as an upper limit). If share permissions grant
> more than the principal is allowed by the NTFS permissions the
> principal will only be allowed what the NTFS permissions state.
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
> MCSE (W2k3,W2k,Nt4) MCDBA
> "Mark" <mark_kurten@acordia.com> wrote in message
> news:%23BjgC%236kFHA.3656@TK2MSFTNGP09.phx.gbl...
>> if i right click on a share on my machine and select properties, under
>> the
>> sharing tab is a permissions button. what is the difference between
> setting
>> permission under this button and setting permissions under the security
> tab?
>> if i allow another user on my network access (full control) to this share
>> using the permissions button on the sharing tab how does this differ than
> if
>> i just added this user under the security tab and give them full control?
>> seems like the same thing.
>>
>> thanks.
>>
>>
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

"Brandon Baker" <mrmoneymatters@nospam.postalias> wrote in message
news:%23jyelnrlFHA.1044@tk2msftngp13.phx.gbl...
> Thanks for making that a little more clear. So basically the most
> restrictive permission is used, when over the wire.

effectively yes

> Also, NTFS can be used
> at the file level where share can't.
>

?? both are applied to determine whether file access is
or is not allowed - when over the wire
>
>
>
> "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> news:uYrYDDqlFHA.3380@TK2MSFTNGP12.phx.gbl...
> > The NTFS permissions (what you called the Security tab) apply
> > for all accesses to the filesystem. The share permissions apply
> > only to over-the-wire access to the filesystem. If NTFS grants
> > greater permission to a principal than does the share level grants,
> > then over-the-wire access is reduced to what the share permissions
> > specific (they act as an upper limit). If share permissions grant
> > more than the principal is allowed by the NTFS permissions the
> > principal will only be allowed what the NTFS permissions state.
> >
> > --
> > Roger Abell
> > Microsoft MVP (Windows Security)
> > MCSE (W2k3,W2k,Nt4) MCDBA
> > "Mark" <mark_kurten@acordia.com> wrote in message
> > news:%23BjgC%236kFHA.3656@TK2MSFTNGP09.phx.gbl...
> >> if i right click on a share on my machine and select properties, under
> >> the
> >> sharing tab is a permissions button. what is the difference between
> > setting
> >> permission under this button and setting permissions under the security
> > tab?
> >> if i allow another user on my network access (full control) to this
share
> >> using the permissions button on the sharing tab how does this differ
than
> > if
> >> i just added this user under the security tab and give them full
control?
> >> seems like the same thing.
> >>
> >> thanks.
> >>
> >>
> >
> >
>
>