Re: Best Practices for NTFS Shares

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 07/26/04 

Date: Mon, 26 Jul 2004 17:38:19 GMT

The Windows 2000 Security Hardening Guide is a pretty good read though I don't know
if it has exactly what you are looking for. Generally you want to follow the least
permissions needed rule to set up folders. By default W2K gives everyone full control
to a share which you should change to full control for administrators and read or
modify for the appropriate users group that needs access to the share. Read allows
execute permissions to a share while modify is needed for write and delete.

NTFS permissions work in conjunction with share permissions for network access and
the most restrictive of the two permissions will apply to a user. Avoid using
everyone/users group in shares or ntfs permissions unless you want all users to have
access. The links below may be helpful. --- Steve

http://support.microsoft.com/?id=301195
http://www.windowsitlibrary.com/Content/592/toc.html
http://www.microsoft.com/technet/Security/prodtech/win2000/win2khg/05sconfg.mspx#XSLTsection129121120120

"Rob" <anonymous@discussions.microsoft.com> wrote in message
news:438b01c4732a$d0d11300$a401280a@phx.gbl...
> I am searching for a white paper on best practices for
> setting up NTFS Shares in W2K. Can anyone point me in the
> right direction or have an article number I can search on?
>
> Thanks,
> Rob

Relevant Pages

  • Re: NTFS and shared permissions
    ... > I have a few questions about NTFS permissions and share that I hope ... I know that NTFS permissions are applied to ... NTFS permissions are of course needed for control of accounts ... down from a more broad NTFS grant). ...
    (microsoft.public.security)
  • Re: Need Help on Assigning Specific Permissions to Shares
    ... can not be changed which would leave only ntfs permissions to control ... in groups to have necessary ntfs permissions. ... XP uses simple file sharing by default. ... > XP Pro but it doesn't say it works in Home edition. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Migrating File servers
    ... shared permissions separately. ... For NTFS permissions, we can use the Windows 2000 Resource Kit tool ... Copy all the data from the old file server to target file server. ...
    (microsoft.public.windows.server.migration)
  • Re: Best Practices for NTFS Shares
    ... >permissions needed rule to set up folders. ... >everyone/users group in shares or ntfs permissions unless ... >> I am searching for a white paper on best practices for ... >> setting up NTFS Shares in W2K. ...
    (microsoft.public.win2000.security)
  • Re: recovering NTFS volumes
    ... If ntfs permissions are not being copied when data is backed up then I believe it ... If the files did not include the administrators group ... but instead a user/group unique to the operating system that is was backed up from, ...
    (microsoft.public.win2000.security)