Share Permissions and Security Groups

From: jmos (jmos_at_discussions.microsoft.com)
Date: 12/21/04 

Date: Tue, 21 Dec 2004 10:17:01 -0800

I have the follwoing setup and I wanted to know if this is correct.

Global Domain Share Share SubFolder
Group local Perms NTFS NTFS

PrjGrp1 Dept Dept-FC Dept-RX PrjGrp1-Modify

The PrjGrp1 group is a global group of user accounts for an OU.
The Dept group is Domain local for the OU which has a member of PrjGrp1.

A Share call Sales has share permissions for the Domain Local group Dept as
Full control. I know I can put the group Everyone but this adds an extra
layer of security to the whole setup.

The Sales Share NTFS permissions has the same domain local group but here it
is given only Read, Execute and list folder permissions.

A subfolder within the Sales Share - Project1 has NTFS permissions set to
Modify for PrjGrp1 global group.

This means that if Fred is in Global groups PrjGrp1 and PrjGrp3 (each
referencing a subfolder in the Sales share ie Project 1 and Project 3), he
will not gain access to the subfolder Project2 within Sales and the NTFS
share permissions will not allow him to fiddle within the Share folder itself.

For one domain setup are my group assignments correct? Should I make the
Dept group a Global Group instead of a Domain local or should I be looking at
a different setup?

TIA

Relevant Pages

  • convert.exe with /cvtarea: parameter during XP installation from network share
    ... drive is an NTFS drive _before_ the GUI part of setup starts, ... folders are inherited from the root folder. ... has higher security permissions like in NT4 or W2K, ...
    (microsoft.public.windowsxp.general)
  • Re: Default NTFS permissions?
    ... not uniform and simply stated. ... You can find the base starting point set in setup security.inf ... > permissions are for the system drive on WinXP Pro. ... > I've been playing with IIS and stupidly re-did the NTFS ...
    (microsoft.public.windowsxp.security_admin)
  • Re: "Put" Only with ftp user isolation
    ... It's NTFS permissions definitely. ... check filemon log. ... > I have successfully setup a FTP site with User Isolation with Active ... I cannot do a List or get even if I set the appropriate NTFS ...
    (microsoft.public.inetserver.iis.ftp)
  • RE: Dual Boot
    ... enter the setup while booting and change the boot from Hard Drive to CD ROM ... unpartitioned drives. ... this will convert the system file from FAT32 to NTFS ... i must worn u that the drive letter must be correct, ...
    (microsoft.public.windowsxp.general)
  • Re: Win2k3 ConvertNTFS Unattended?
    ... ConvertNTFS if you want the security template, ... Converting FAT/FAT32 Partitions to NTFS ... During setup on an NTFS partition, an Access Control List is ...
    (microsoft.public.windows.server.setup)