Best Practices on Combining NTFS and Share Permissions

The best way to go about combining NTFS and Share permissions is to first understand how the two types of permissions affect one another. In fact when NTFS and Share permissions are combined, the most restrictive permission will take effect.

For instance, if the user John has “Allow-Full Control” NTFS permission on a folder and he also has “Allow-Read” Share permission on the same folder. As a result of combining the two, John will receive “Allow-Read” permission on the folder.

The best approach to minimize the confusion and difficulty of combining NTFS and share permissions, is to always assign the user entity of “Everyone” “Allow-Full Control” share permission and then assign more detailed permissions using NTFS permissions. This way we have avoided the difficulty of combining permissions effectively and have also managed to provide more detailed permissions to users and groups.

If you are interested in security and you want more of these detailed step-by-step guides, you could have a look at my recently published ebook by clicking on the book cover below:

Security_on_Windows_2012

Leave a Reply

Your email address will not be published. Required fields are marked *