Re: Shared permissions vs. security
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 05/20/05
- Next message: vincenta: "Firewall"
- Previous message: Bob Weiner: "Re: LDAP/S"
- In reply to: Carl Gross: "Shared permissions vs. security"
- Next in thread: Carl Gross: "RE: Shared permissions vs. security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 19 May 2005 21:25:07 -0500
System basically means operating system and you generally want to give
system full control as it would have by default. Not having the system with
full control possibly can break some things with backups being an example of
a possibility.
If you add "user" or a user account then that user will have full control
over that folder/file which means that the user can read, list, execute,
write, delete, and change permissions. Generally this is considered
excessive permissions for a user other than something like their home folder
or user profile folder. A basic security principle is that of least
privilege which means a user will only have the necessary rights and
permissions to do their job. Then they will be much less likely to
accidentally delete folders/files or install software that they should not -
maybe even a Trojan. The link below explains more on folder permissions.
http://support.microsoft.com/default.aspx?kbid=300691
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419 --- mostly
applies to Windows 2000 also
Your subject mentions "shared". If you mean network shares then keep in mind
that share permissions work together with folder/ntfs permissions. Share
permissions only apply when a use accesses a share via the network.
Folder/ntfs permissions apply to a local logon or network access. If share
permissions conflict with folder/ntfs permissions for a network user the
most restrictive permission will apply to the user. In other words if a user
has only read access to a share but full control to the folder/ntfs
permissions. That user will only have to read/list/execute access over the
network for the share contents. --- Steve
"Carl Gross" <CarlGross@discussions.microsoft.com> wrote in message
news:11866EDF-64D0-481C-A70B-89E483C48D01@microsoft.com...
>I have been trying to make our network more secure by setting each
> workstation hardrive shared between Domain Admins with Full Control
> rights.
>
> What is the difference between setting this permission and selecting the
> Security tab to have the same permissions except adding the SYSTEM and
> user
> at that workstation?
>
> We have W2K SP4 workstations on a SBS 2003 server.
- Next message: vincenta: "Firewall"
- Previous message: Bob Weiner: "Re: LDAP/S"
- In reply to: Carl Gross: "Shared permissions vs. security"
- Next in thread: Carl Gross: "RE: Shared permissions vs. security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
