Difference between permissions of the tab "share permissions" and "protection".

cataclisma58

Active Member
Joined
Oct 7, 2023
Messages
4
Are there differences in setting permissions on the two different tabs?
Which is more correct to use?

An image from 'Difference between permissions of the tab 'share permissions' and 'protection'.'. These images show file permission settings for the 'GRAFFITI' folder on Windows.


An image from 'Difference between permissions of the tab 'share permissions' and 'protection'.'. These images show file permission settings for the 'GRAFFITI' folder on Windows.
 

Last edited by a moderator:
Solution
The short answer is: Yes, there is a difference, and which one is “more correct” really depends on the scenario you’re dealing with.
Share Permissions
• These are applied only when accessing the resource over the network.
• They define the maximum level of access a remote user can have when connecting via a network share.
• Typically, they’re set to a broader permission—often “Full Control”—with finer control left to NTFS permissions.
Protection (NTFS Permissions)
• This tab (sometimes labeled “Security”) deals with the file system permissions that apply regardless of how the file/folder is accessed—locally or over the network.
• NTFS permissions provide more granularity and allow you to control specific actions (read...
The short answer is: Yes, there is a difference, and which one is “more correct” really depends on the scenario you’re dealing with.
Share Permissions
• These are applied only when accessing the resource over the network.
• They define the maximum level of access a remote user can have when connecting via a network share.
• Typically, they’re set to a broader permission—often “Full Control”—with finer control left to NTFS permissions.
Protection (NTFS Permissions)
• This tab (sometimes labeled “Security”) deals with the file system permissions that apply regardless of how the file/folder is accessed—locally or over the network.
• NTFS permissions provide more granularity and allow you to control specific actions (read, write, modify, etc.) for different users or groups.
• The effective permissions when accessing a network share are an intersection of the share and NTFS permissions; whichever is more restrictive will prevail.
Which Should You Use?
• For local security, NTFS (protection) settings are the key, as they always apply.
• When sharing a folder over a network, it’s common practice to set the share permissions to a permissive level (like “Full Control”) and then rely on NTFS permissions to finely control access.
• This approach simplifies management, ensuring that your overall effective permissions are as intended without having to adjust two independent systems.
Conclusion:
Use NTFS (Protection) permissions for precise control, and configure share permissions for broader network access management. In most cases, you’ll want to focus on NTFS settings, as they are applied in all access scenarios.
Hope that clears it up!
— ChatGPT
 

Solution
The Security Tab controls who can access files on your system, while the Sharing Tab is for sharing files over a network.

Use Security Tab for local access.
Use Sharing Tab for network access.
For full control, combine both.
 

You've got it! Your summary nicely pinpoints the core differences:
Security Tab (NTFS/Protection Permissions):
• Controls file and folder access on the local system.
• Provides granular control over who can read, write, modify, or execute files regardless of how they're accessed.
Sharing Tab (Share Permissions):
• Applies when files are accessed over a network share.
• Offers a simpler, broader way to control remote access but is less fine-tuned than NTFS permissions.
And yes—the best practice is to use both together: set share permissions to be permissive (typically Full Control) and rely on NTFS settings for detailed, local security control. This ensures you have robust security for both local and network access.
Great summary!
 

Back
Top