Re: Best Practices for NTFS Shares

anonymous_at_discussions.microsoft.com
Date: 07/26/04


Date: Mon, 26 Jul 2004 10:52:11 -0700

Thanks a lot. I needed to find documentation to support my
assertion that we get rid of the FC on the Everyone
Group. These links are very helpful.
>-----Original Message-----
>The Windows 2000 Security Hardening Guide is a pretty
good read though I don't know
>if it has exactly what you are looking for. Generally you
want to follow the least
>permissions needed rule to set up folders. By default W2K
gives everyone full control
>to a share which you should change to full control for
administrators and read or
>modify for the appropriate users group that needs access
to the share. Read allows
>execute permissions to a share while modify is needed for
write and delete.
>
>NTFS permissions work in conjunction with share
permissions for network access and
>the most restrictive of the two permissions will apply to
a user. Avoid using
>everyone/users group in shares or ntfs permissions unless
you want all users to have
>access. The links below may be helpful. --- Steve
>
>http://support.microsoft.com/?id=301195
>http://www.windowsitlibrary.com/Content/592/toc.html
>http://www.microsoft.com/technet/Security/prodtech/win2000
/win2khg/05sconfg.mspx#XSLTsection129121120120
>
>
>"Rob" <anonymous@discussions.microsoft.com> wrote in
message
>news:438b01c4732a$d0d11300$a401280a@phx.gbl...
>> I am searching for a white paper on best practices for
>> setting up NTFS Shares in W2K. Can anyone point me in
the
>> right direction or have an article number I can search
on?
>>
>> Thanks,
>> Rob
>
>
>.
>



Relevant Pages

  • RE: Migrating File servers
    ... shared permissions separately. ... For NTFS permissions, we can use the Windows 2000 Resource Kit tool ... Copy all the data from the old file server to target file server. ...
    (microsoft.public.windows.server.migration)
  • Re: NTFS and shared permissions
    ... > I have a few questions about NTFS permissions and share that I hope ... I know that NTFS permissions are applied to ... NTFS permissions are of course needed for control of accounts ... down from a more broad NTFS grant). ...
    (microsoft.public.security)
  • Re: Need Help on Assigning Specific Permissions to Shares
    ... can not be changed which would leave only ntfs permissions to control ... in groups to have necessary ntfs permissions. ... XP uses simple file sharing by default. ... > XP Pro but it doesn't say it works in Home edition. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Best Practices for NTFS Shares
    ... execute permissions to a share while modify is needed for write and delete. ... everyone/users group in shares or ntfs permissions unless you want all users to have ... > I am searching for a white paper on best practices for ... > setting up NTFS Shares in W2K. ...
    (microsoft.public.win2000.security)
  • Re: recovering NTFS volumes
    ... If ntfs permissions are not being copied when data is backed up then I believe it ... If the files did not include the administrators group ... but instead a user/group unique to the operating system that is was backed up from, ...
    (microsoft.public.win2000.security)