shared folders best practices**

  • Thread starter Thread starter Darren D
  • Start date Start date
D

Darren D

Hi All
I have a number of network users that I would like to begin by setting up
users shares , however I have read that share permission should not be use
for a number of reason e.g replication - shared permission are not
replicated or auditing- you cannot audit file shares permission etc.. as a
result I would like to used NTFS permission to lock down my shares..
Let say .. user A is the only account with the exception of administrators
that should have access to a shared folder .. here is how I have configure
the share..
On the share I have set shared permissions to allow full control to the
everyone group then on the NTFS permission I have set User A with change
permissions and Domain admins - full control..
Is this correct ?

Thanks
 
Darren D said:
Hi All
I have a number of network users that I would like to begin by setting up
users shares , however I have read that share permission should not be use
for a number of reason e.g replication - shared permission are not
replicated or auditing- you cannot audit file shares permission etc.. as a
result I would like to used NTFS permission to lock down my shares..
Let say .. user A is the only account with the exception of administrators
that should have access to a shared folder .. here is how I have configure
the share..
On the share I have set shared permissions to allow full control to the
everyone group then on the NTFS permission I have set User A with change
permissions and Domain admins - full control..
Is this correct ?
Click to expand...

That would work, although, the generally accepted practice is to put User A
in Group Z and then give group Z the permissions. That way, if User B takes
User A's place, you only have to remove User A from Group Z and add User B
in his place; thereby giving User B ALL of User A's permissions/rights in a
few very easy steps. This is much easier than having to remember all of the
permissions/rights that have been set up for User A.
 
Back
Top