Re: "Everyone group"

From: Charles Braun (C_A_Braun@oneSPAMTHWARTbox.com)
Date: 02/25/03 

From: "Charles Braun" <C_A_Braun@oneSPAMTHWARTbox.com>
Date: Mon, 24 Feb 2003 15:39:51 -0800

PERMISSIONS: SHARE VS. NTFS

Many users who migrate from Windows 9x to Windows 2000 aren't familiar with
NTFS permissions and, specifically, how they differ from share permissions.
Understanding NTFS permissions and share permissions is critical to securely
sharing local resources with others on the network.

Share permissions are the permissions you set for a folder when you share
that folder. The share permissions determine the type of access that others
have to the shared folder across the network. There are three types of share
permissions: Full Control, Change, and Read.

NTFS permissions determine the action that users can take for a folder or
file both across the network and locally. Unlike share permissions, NTFS
permissions offer several other permissions besides Full Control, Change,
and Read that can be set as a group or individually. The most restrictive
permission applies when share and NTFS permissions conflict.

The default behavior in Windows 2000 is to grant Full Control to the
built-in Everyone group when you share a folder. If you're sharing an NTFS
folder, Full Control at the share level is fine because you can allow or
deny access (or varying levels of access) through NTFS permissions for
specific users or groups. When sharing a folder on a FAT volume, however,
pay closer attention to permissions.

For example, you probably don't want Everyone to have Full Control; instead,
you can limit access based on group membership. If that's the case, open the
Sharing property page for the folder and click Permissions to open the
Permissions dialog box. Adjust share permissions as necessary, adding and
removing groups, to achieve the required level of security.

To configure NTFS permissions, click the Security tab in the folder's
property *** and then adjust permissions as needed, adding and removing
groups and specifying the required permissions.
"Shelton" <renew@rconnect.com> wrote in message
news:01b901c2d9e0$68e90ac0$a201280a@phx.gbl...
> Hello,
>
> Is it necessary to leave the Everyone group with full
> permissions? What exactly is this group's function, and
> can it be removed entirely?
>
> Thank you,
>
> Shelton