Re: Setting Security/Permissions on a Folder??

From: Kent W. England [MVP] (kwe@mvps.org)
Date: 06/30/02


From: "Kent W. England [MVP]" <kwe@mvps.org>
Date: Sun, 30 Jun 2002 12:51:06 -0700


The share permissions and the file system permissions are used together
to grant access to files and folders.

Normally you would want to manage group permissions, rather than
individual permissions. Since you are using "advanced" sharing I assume
you have disabled simple file sharing and you are using XP Pro.

Create accounts for everyone that will use the XP file server and make
them limited users. Create one for yourself to test. These folks must
logon to their own machine with this username and password to gain
transparent access to the XP file server.

Create a folder and set the permissions on the security tab for the
Users group, which is the group you put all your users in when you
created their accounts. You want to set "read" permissions. Logon to a
limited account of your own and verify that you can only read and
execute. Restrict or remove the Everyone account and the Guests account,
if present.

Now share the folder and give Users full permission. This will allow
them to see the shared folder, but the NTFS permissions will disallow
write permission. Make sure that Guest and Everyone are either
restricted or absent so they won't see anything. Now you can manage User
access using the NTFS permissions and not have to fiddle with both
permissions.

--
Kent W. England, MS MVP for Windows XP
(Please respond only in the newsgroup)
John T. <JohnT@hotmailX.com> wrote:
> I'm trying to do something that should be very simple but is anything
> but. On my peer-to-peer Windows XP Pro network I want to share a
> folder from my hard drive in such a way that all other users have
> only read and execute on all files in the folder and its sub-folders.
> I have the advanced sharing options turned on and I want to learn how
> to use them.
>
> First of all, I am confused by sharing permissions and security
> permissions. What is the difference between them and must I configure
> both? Then there's the allow and deny flags... and their involment in
> inheritance of "objects". For starters, what is an "object"? Why is
> this so freakin' complicated?
>
> Can someone please direct me to a concise explanation of this stuff.


Relevant Pages

  • Re: User Account lost when XP had to be reinstalled
    ... you can set XP Home permissions in Safe Mode. ... This is not your administrator account, ... >Open Explorer, go to Tools and Folder Options, on the ... >tab, click advanced, go to the Owner tab and select the ...
    (microsoft.public.windowsxp.accessibility)
  • Re: XP Home: selective folder sharing
    ... Adding Test made no difference for sharing the Test folder in XP Safe Mode. ... In Control Panel/Network on the 98SE machine, I found the network login set ... click the Permissions button to ...
    (microsoft.public.windowsxp.network_web)
  • Re: How to unlock the user account files in an previous Window XP
    ... > ownership and permissions supersede administrator rights. ... This is not your administrator account, ... > Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ... > tab, click advanced, go to the Owner tab and select the user that was logged ...
    (microsoft.public.windowsxp.accessibility)
  • OK, heres what i tried...
    ... I added the IWAM_machine account with no effect. ... groups with the expected permissions. ... Noticed the CREATOR OWNER was on that folder after i ... >are using FrontPage and storing the mdb within the web ...
    (microsoft.public.windowsxp.security_admin)
  • Cannot create virtual diractory
    ... Let's call this account "MYDOMAIN\WebUser". ... I created a share to the folder ... I set the __share permissions__ so that only the ... Virtual Directory). ...
    (microsoft.public.inetserver.iis)