Computing.Net > Forums > Windows 2000 > Active directory security

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Active directory security

Reply to Message Icon

Name: aaronlee
Date: January 18, 2006 at 03:34:42 Pacific
OS: Win 2k
CPU/Ram: 3ghz P4, 1024mb
Comment:

Silly question - what's the difference between permissions and security regarding shared folders?

If variety is the spice of life, then why do poeple keep saying it?



Sponsored Link
Ads by Google

Response Number 1
Name: Jennifer SUMN
Date: January 18, 2006 at 08:41:56 Pacific
Reply:

"Difference between permissions and Security" not very clear as to what you're asking. File Permissions versus Share Permissions?

Soylent Green is PEOPLE!!!


0

Response Number 2
Name: aaronlee
Date: January 19, 2006 at 02:08:46 Pacific
Reply:

To clarify: When looking at the properties of a shared folder, there are tabs for sharing and security. On the sharing tab, you can name the share, and add users who are able to access this folder, and the type of access they can have. On the security tab, you can add users and set permissions as well. What is the distinction between these two features?

If variety is the spice of life, then why do poeple keep saying it?


0

Response Number 3
Name: Jennifer SUMN
Date: January 19, 2006 at 07:53:21 Pacific
Reply:

Security shows File/Folder Permissions.
Sharing shows Share name/user connection limitiations, Share permissions, etc.

Soylent Green is PEOPLE!!!


0

Response Number 4
Name: Glen
Date: January 19, 2006 at 12:59:39 Pacific
Reply:

The difference is that on the Sharing Tab, the permissions are for Share permissions as Jennifer say. The Security Tab allows configuration of file (NTFS) permiissions.

The differences are critical and you should understand the difference before you set security if you are not familiar with them. Based on your question, I'd have to assume you do not. Nothing wrong with that, I'd just suggest you learn about how the two interact as it can cause rather severe problems if the security is not set the way you intended it.

In very simple terms, Share permission are effective only for resources that are accessed across the network, as opposed to NTFS permissions which are effective even for users who may be logged on to the local machine. If you set READ Share permissions to a user who has FULL CONTROL NTFS permissions and that user is logged on locally, the Share permissions will have not effect and the user will have FULL CONTROL.

For resources that are accessed across the network where Share permission are effective, you should understand what happens if you have both Share and NTFS permissions enabled. When NTFS and Share permissions combine, the resulting permissions will the the most restrictive of the two. If a user is given READ Share permissions and NTFS FULL CONTROL to the same folder that is accessed across the network, the user will have READ access.

Good luck.


0

Response Number 5
Name: aaronlee
Date: January 22, 2006 at 04:05:43 Pacific
Reply:

Thank you all, you've been most helpful.

If variety is the spice of life, then why do poeple keep saying it?


0

Related Posts

See More



Response Number 6
Name: Frankie566
Date: February 1, 2006 at 15:15:55 Pacific
Reply:

Hi,
I just read your post and even though they have explained in detail to you the difference between Share Tab and the Secutity Tab its lloks confusing. To my understanding you can correct me if I'm wrong, Share Tab is where you set what you want to share and with who. The Security tab is where you specify once verified to access that folder or share, 'what they are allowed to do with it' once they acces it.
Ex.
Sharing Tab - Folder named "My Shared Documents" shared as My Shared Documents.
Security Tab - Share with Mary, Jane and John, BUT Not with Mike.
Permissions:
Mary - Full control (read, write, anything she wants)
Jane& John - Read Only (can see files but can not modify)
Mike - well he's not worthy.


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 2000 Forum Home


Sponsored links

Ads by Google


Results for: Active directory security

active directory www.computing.net/answers/windows-2000/active-directory/38755.html

Win98 machines in Active Directory www.computing.net/answers/windows-2000/win98-machines-in-active-directory-/38893.html

Windows2000/2003 Active Directory www.computing.net/answers/windows-2000/windows20002003-active-directory/49650.html