Understanding permissions

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

hi all

dunno how many times i have covered share and ntfs permissions but i keep forgetting the rules. so here is my understanding and please correct if im wrong.

a shared folder - combine share and ntfs and the most restrictive wins

ntfs permissions from one group and ntfs permissions from another group are culmlative - less restrictive permission is given.

i hope my understanding is correct and if not then please advise

regards

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Think you are right there. Also remember that if you are unsure, you can check the effective permissions tab. Try it on a few folders in a lab and test what happens.

 

The way I always remember it is as follows:

Look at the Shared Permissions and NTFS Permissions seperatley. Escalate them both to the highest permission e.g. Shared Write and NTFS Read. Then combine them and the most restrictive of the two wins, so in this case NTFS Read.

 

*Stupid Internet*
I was posting here and it kicked me off! Yes, what you are saying is correct- I've only recently read a N+ chapter about it, and thats my understanding of sharing and permissions.

 

The only exception to this when calculating the "highest permission" is Deny... a Deny always trumps an Allow.

 

If someone asks permission to use the escalator and then is denied what would be the outcome there? Would they escalate the problem or go with the most restrictive response?

Ignore me i'm feeling stupid... it happens, a lot.

 

Except if it an explicit Allow, which over rides an inherited Deny.

 

True, but this is getting reeaallll deep now.