File/folder and share permissions

I have found that placing correct permissions on objects in the file system is more important than worrying too much about permissions on the share. If you have the file system locked down pretty tight and monitor it, etc., you can get away with an"Everyone/Full Control" permission on the share because no one can gain unauthorized access to a file that is locked down on the file system anyway.

Share permissions were introduced as a feeble attempt to secure the FAT file system in a networked environment, since it doesn't have inherent security. Setting share permissions on a shared NTFS folder to me seems like an unecessary layer of complexity.

Turning off "Bypass Travers Checking," however, is a "must!"

Thank you for that article. I learned something from that article and we need more security articles available to us sys admins.

Thanks

Craig S

Reading the other 2 posts I am assuming that this is on share permissions vs ntfs permissions.

There is alot that can be expounded on but I would much rather wait to read the article before throwing my 2 cents in.