Re: Share and NTFS permissions

IMO that is the best way when the objective is to make the
task as simple as possible without regard to what the impact
is upon security. You have two levels of protection. The
advise is to not use one. Bad advise in my opinion.
The share level permissions need to allow as minimum the
sum of the ntfs permissions you want to be possible. Some
people evidently do not want to add, and say that, since there
is no sum greater than Everyone Full, use that. OK. So now
you make a mistake in the NTFS permissions and grant to
Users Full on some part of the share - or the Owner of some
part does. Now what?

"vashi" <vashi@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5CD26F1F-E574-4750-8BD8-4E4BD07AF133@xxxxxxxxxxxxxxxx
I have read that the best way to allocate permissions for shared folders
is -
is to Share the folder . Give Share-Permissions as " Everyone Full
Control"
and give the specific Allow/Deny permissions in the NTFS tab.

Is there any insecurity in giving Share-permissions as Full control and
only
specifying the NTFS permissions accurately ?

If no insecurities , why is Windows giving us the facility to give
permissions in 2 places and making it confusing?




.