Are these fair statements?

NTFS permissions + NTFS permissions=least restrictive of the two

share permissions + NTFS permissions=most restrictive or cummulative affect

trebor

Report this post to a moderator

Oops I mean cummulative effect (not affect)

Report this post to a moderator

You are correct that when you combine shared folder permissions and NTFS permissions, then the more restrictive is always the overriding permission. Remember that this only applies when accessing the resource remotely. This doesn't apply when logging on interactively.

When using NTFS permissions, there are 4 things that should be remembered. They are effective permissions for a resource are the sum of the NTFS permissions that you assign to an individual user account and to all the groups to which the user belongs. For example if User one has the read permission assigned to a folder an is a member of a group that has the write permission assigned, the User1's effective permissions are Read+Write on that folder. The second thing is that NTFS file permissions always take priority over NTFS folder permissions. So if a user has full control in a folder, but a file in that folder has read, the the user won't be able to do anything with it besides read it. The third thing is that you can override permissions with deny. Denying a permission overrides all instances of where that permission is allowed. Denying permissions is a very powerful tool, and should only be used where required. The last thing is NTFS permissions inheritance. By default, the permissions that you assign to a parent folder are propagated to the subfolders and files within the parent.

Report this post to a moderator

Thanks Slinky. It is nice to see it in plain English. I think I've got it now.


trebor

[This message has been edited by trebor (edited 02-07-2001)(spelling isn't my forté).]

[This message has been edited by trebor (edited 02-07-2001).]

Report this post to a moderator

Glad to know that I helped.

Report this post to a moderator