Hardware

Ask something
Question Locked

windows xp permission

0 helpful
5 replies

by computerfeeder 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

hi all

i am new in this fourm.i have some confusion
i created one folder on d drive and shared it on network i have two computer in a workgroup.
on share tab i removed everyone group and add user applied permission change,read.on ntfs permission i applied read,write,list folder content.which was done successfully.but later i notice that user on other computer is creating folder on shared folder and reading the permission.so i tried to setup special permission on shared folder.what i did select user advance select user to edit and open special permission tab.denied read and creatfolder/append data.but when i apply these setting user on other computer cant open file to write or modify it.standard permissions remove automatically only special permission check box grayout if i ally permission again i lost my special permission.really confused help me guys
both computer windows xp pro is installed service pack2

5 replies

by nimmo

Something to always remember about permissions is that the MOST restrictive applies

For example: if you have read/write sharing permissions and have read NTFS permissions your users are only going to be able to read the contents of the folder because the most restrictive permissions are been applied to the folder and its contents.

Double check your permission setup and make sure that your users have been added into the sharing and NTFS permissions and have also been given the rights that they need in both areas.

by wancona

Remember, everybody is apart of the "Everybody" group. If you remove that group, you are not allowing anyone access to the share folders. Set "Everybody" to read, and then ad the special permissions to whomever neccessary.

by nimmo

You can remove the everybody group without loosing access rights.

It all depends on your network setup and level of security you want to achieve.

I will remove the everybody group from both the sharing permissions and NTFS permissions, why would I want everybody to be able to access folder contents such as financial data etc.

I'd perfer to add cirten groups to certain folders.

by naughtymonkey

when you edited the shared folder permissions, they then inherited by the files. If you want the files different than the folder, look at what the special permissions are applying to. You can select this folder, folder and files, folder and sub folders, etc...

You can also disable inheritance in the advanced security section.

Also, when you denied them read access, you cut off read access no matter what it says anywhere else. Do not use deny permissions unless you are extremely certain you know what you are doing. They tend to act in ways you don't expect. It is much better to disable a permission than to deny it.

This discussion is closed to new replies.