NTFS permissions and folder permissions

I wanted to know the best practice method for documenting both NTFS and folder permissions on a Windows 2003 and 2008 environment.



Microsoft's revised advice is that you grant the necessary folder and NTFS permissions to the groups as required and that you should use both NTFS and SHARE permissions granting only the minimum permission's on each.

I practice many people (myself included), tend to simply allow FULL CONTROL to EVERYONE on the share and then lock down the folder by assigning the appropriate permissions to groups.

Since you need both SHARE and NTFS permissions to access files and folders on the share, in practice either method achieves the desired outcome.



Microsoft's revised advice is that you grant the necessary folder and NTFS permissions to the groups as required and that you should use both NTFS and SHARE permissions granting only the minimum permission's on each.

I practice many people (myself included), tend to simply allow FULL CONTROL to EVERYONE on the share and then lock down the folder by assigning the appropriate permissions to groups.

Since you need both SHARE and NTFS permissions to access files and folders on the share, in practice either method achieves the desired outcome.



Are you asking about documenting your existing share & NTFS structures or best practices in setting share & NTFS perms?

If you want documenting, there is a nice free tool from SolarWinds that shows you NTFS and SHARE permissions. It's a "permissions analyzer" :
http://www.solarwinds.com/products/freetools/permissions_analyzer_for_active_directory/







Share this

Related Posts

There was an error in this gadget