You share folders to provide network users with access to resources. If you are using a FAT volume, the shared folder permissions are the only resource available to prov. security for the folders that you have shared and the folders and Files they contain lf you are using an NTFS volume, you can assign NTFS permissions to individual and groups to better control access to the files and subfolders in the shared (Older; When you combine shared folder permissions and NTFS permissions, the more tesum tive permission is always the overriding permission.
How to Calculate Effective Permissions for Folders That Have Shared Folder and NTFS Permissions
When users connect to shared folders that are located on NTFS volumes, share permissions and NTFS permissions will combine to control the actions that a user can perform. Determining effective permissions can be somewhat difficult when bOth NWS and shared permissions are involved.
Calculating effective permissions for resources within a shared folder on an NTFS par. tition is a three-step process.
1. Calculate the NTFS effective permissions for the user.
2. Calculate the shared folder effective permissions for the user.
3. Analyze the results of steps 1 and 2, and select the result that is the more restrictive of the two. This will be the user's effective permission for the shared folder.
Rules When Combining Shared Folder Permissions and NTFS Permissions
When you use shared folder permissions on an NTFS volume, the following rules‘ apply
- You can apply NTFS permissions to files and subfolders in the shared folder. You can apply different NTFS permissions to each file and subfolder contained in a shared folder.
- In addition to shared folder permissions, Users must have NTFS permissions for the files and subfolders contained in shared folders to access those files and sub‘ folders. This is in contrast to FAT volumes, in which permissions for a shared folder are the only permissions protecting files and subfolders in the shaled folder.
- When you combine shared folder permissions and NTFS permissions, the more restrictive permission is always the overriding permission.
the Users group has the shared folder Full Control permission for the Public folder and the NTFS Read permission for FileA. The Users group’s effective permission for FileA is the more restrictive Read permission. The effective permission for FileB is Full Control because both the shared folder permission and the NTFS permission allow this level of access.
No comments:
Post a Comment