|
Home > Archive > 70-210 > February 2001 > PERMISSIONS revisited
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
PERMISSIONS revisited
|
|
|
| Are these fair statements?
NTFS permissions + NTFS permissions=least restrictive of the two
share permissions + NTFS permissions=most restrictive or cummulative affect
trebor | |
|
| Oops I mean cummulative effect (not affect) | |
|
| You are correct that when you combine shared folder permissions and NTFS permissions, then the more restrictive is always the overriding permission. Remember that this only applies when accessing the resource remotely. This doesn't apply when logging on interactively.
When using NTFS permissions, there are 4 things that should be remembered. They are effective permissions for a resource are the sum of the NTFS permissions that you assign to an individual user account and to all the groups to which the user belongs. For example if User one has the read permission assigned to a folder an is a member of a group that has the write permission assigned, the User1's effective permissions are Read+Write on that folder. The second thing is that NTFS file permissions always take priority over NTFS folder permissions. So if a user has full control in a folder, but a file in that folder has read, the the user won't be able to do anything with it besides read it. The third thing is that you can override permissions with deny. Denying a permission overrides all instances of where that permission is allowed. Denying permissions is a very powerful tool, and should only be used where required. The last thing is NTFS permissions inheritance. By default, the permissions that you assign to a parent folder are propagated to the subfolders and files within the parent. | |
|
| Thanks Slinky. It is nice to see it in plain English. I think I've got it now.
trebor
[This message has been edited by trebor (edited 02-07-2001)(spelling isn't my forté).]
[This message has been edited by trebor (edited 02-07-2001).] | |
|
| Glad to know that I helped.  |
|
|
|
|