Re: Default NTFS permissions too liberal on newly created volumes


"Mike M" <nospam@xxxxxxxxxxxx> wrote in message
news:uB0e1tcIGHA.3056@xxxxxxxxxxxxxxxxxxxxxxx
>
>> Do you have a more reasonable "best guess" as a one-size-fits-all set
>> of permissions that should be used upon defining a new non-boot
>> partition ?? Something had to be choosen, or else what, leave it
>> with no permissions and force all people to always have to set NTFS
>> permissions when a new partition is formatted ??
>
> Good point. Most of my Windows boxes are app servers running the system
> drive. Putting on my file server "hat", makes me look at it from a
> different point of view.
>
> I'm so used to Linux and Netware's "additive" permissions model for file
> serving, that it still takes a different way of looking at things form the
> MS point of view...even after using NT for more than a decade!! :)
>

Yep, I hear you (even now after coming to NT from Unix+IBM back
at NT 3.50). One thing to keep in mind is that to a fair extent the
defaults are selected as "workable" for client and server systems
where there is overlap (like the ACLing of a new partition). With
the large percentage being "less initiated" client (aka home) users,
a choice for the defaults that will work for their likely need does then
seem like a reasonable choice (especially if you recognize that XP
Home edition does not have the NTFS security dialog unless one
boots it into safe mode). Another way of looking at it is that many
srv admin do, as I do, set the NTFS permissions (often to only
Administrators Full) as a first action after the format completes
(old NT habits die hard - this is a hang on from when the default
ACL was a null = Everyone Full).
--
Roger


.

Relevant Pages

  • Re: Ownsership and Rights
    ... Full Controll set up for bothe the NTFS and for the share. ... Also, when I am logged into the server as Administrator, and I check the ... Effective Permissions does not work as well. ... That I'm working on has share rights of Everyone, ...
    (microsoft.public.windows.server.sbs)
  • Re: Corporate File control
    ... How often are you finding you need to change permissions? ... do this - I set up the permissions on the folders when I set up the server, ... > minutia of NTFS permissions would be challenging. ... > find good documentation on NTFS settings? ...
    (microsoft.public.win2000.file_system)
  • Re: Corporate File control
    ... How often are you finding you need to change permissions? ... do this - I set up the permissions on the folders when I set up the server, ... > minutia of NTFS permissions would be challenging. ... > find good documentation on NTFS settings? ...
    (microsoft.public.security)
  • Re: appears to loose authentication
    ... me to think that there are security and permissions issues. ... to any shares below is baffling and also suspectable to incorrect NTFS ... an invalid DNS server in the Tcp/Ip settings. ... I checked the share and ntfs permissions on the goldmine share, ...
    (microsoft.public.security)
  • Re: writing to windoze partition
    ... Umask of 222 turns off write permissions on all files and is suggested ... Linux cannot manipulate the MFT in the NTFS filesystem. ... > The windoze partition mounts okay and I can change directories, ...
    (Fedora)