cataclisma58
Well-Known Member
Are there differences in setting permissions on the two different tabs?
Which is more correct to use?
Which is more correct to use?
Last edited by a moderator:
📎 AI Summary:
The thread discusses the differences between the Share Permissions tab and the NTFS (Security) Permissions tab in Windows, with explanations clarifying that share permissions manage network access while NTFS permissions control local access with more granularity. The consensus emphasizes using both together—setting permissive share permissions combined with detailed NTFS permissions—for effective security management. Overall, the discussion is informative, highlighting best practices for configuring file and folder permissions in Windows.
The thread discusses the differences between the Share Permissions tab and the NTFS (Security) Permissions tab in Windows, with explanations clarifying that share permissions manage network access while NTFS permissions control local access with more granularity. The consensus emphasizes using both together—setting permissive share permissions combined with detailed NTFS permissions—for effective security management. Overall, the discussion is informative, highlighting best practices for configuring file and folder permissions in Windows.
Solution
The short answer is: Yes, there is a difference, and which one is “more correct” really depends on the scenario you’re dealing with.
Share Permissions
• These are applied only when accessing the resource over the network.
• They define the maximum level of access a remote user can have when connecting via a network share.
• Typically, they’re set to a broader permission—often “Full Control”—with finer control left to NTFS permissions.
Protection (NTFS Permissions)
• This tab (sometimes labeled “Security”) deals with the file system permissions that apply regardless of how the file/folder is accessed—locally or over the network.
• NTFS permissions provide more granularity and allow you to control specific actions (read, write, modify, etc. for different users or groups.
• The effective permissions when accessing a network share are an intersection of the share and NTFS permissions; whichever is more restrictive will prevail.
Which Should You Use?
• For local security, NTFS (protection) settings are the key, as they always apply.
• When sharing a folder over a network, it’s common practice to set the share permissions to a permissive level (like “Full Control”) and then rely on NTFS permissions to finely control access.
• This approach simplifies management, ensuring that your overall effective permissions are as intended without having to adjust two independent systems.
Conclusion:
Use NTFS (Protection) permissions for precise control, and configure share permissions for broader network access management. In most cases, you’ll want to focus on NTFS settings, as they are applied in all access scenarios.
Hope that clears it up!
— ChatGPT
Share Permissions
• These are applied only when accessing the resource over the network.
• They define the maximum level of access a remote user can have when connecting via a network share.
• Typically, they’re set to a broader permission—often “Full Control”—with finer control left to NTFS permissions.
Protection (NTFS Permissions)
• This tab (sometimes labeled “Security”) deals with the file system permissions that apply regardless of how the file/folder is accessed—locally or over the network.
• NTFS permissions provide more granularity and allow you to control specific actions (read, write, modify, etc. for different users or groups.
• The effective permissions when accessing a network share are an intersection of the share and NTFS permissions; whichever is more restrictive will prevail.
Which Should You Use?
• For local security, NTFS (protection) settings are the key, as they always apply.
• When sharing a folder over a network, it’s common practice to set the share permissions to a permissive level (like “Full Control”) and then rely on NTFS permissions to finely control access.
• This approach simplifies management, ensuring that your overall effective permissions are as intended without having to adjust two independent systems.
Conclusion:
Use NTFS (Protection) permissions for precise control, and configure share permissions for broader network access management. In most cases, you’ll want to focus on NTFS settings, as they are applied in all access scenarios.
Hope that clears it up!
— ChatGPT
datawizard0103
Fantastic Member
The Security Tab controls who can access files on your system, while the Sharing Tab is for sharing files over a network.
Use Security Tab for local access.
Use Sharing Tab for network access.
For full control, combine both.
Use Security Tab for local access.
Use Sharing Tab for network access.
For full control, combine both.
You've got it! Your summary nicely pinpoints the core differences:
Security Tab (NTFS/Protection Permissions):
• Controls file and folder access on the local system.
• Provides granular control over who can read, write, modify, or execute files regardless of how they're accessed.
Sharing Tab (Share Permissions):
• Applies when files are accessed over a network share.
• Offers a simpler, broader way to control remote access but is less fine-tuned than NTFS permissions.
And yes—the best practice is to use both together: set share permissions to be permissive (typically Full Control) and rely on NTFS settings for detailed, local security control. This ensures you have robust security for both local and network access.
Great summary!
Security Tab (NTFS/Protection Permissions):
• Controls file and folder access on the local system.
• Provides granular control over who can read, write, modify, or execute files regardless of how they're accessed.
Sharing Tab (Share Permissions):
• Applies when files are accessed over a network share.
• Offers a simpler, broader way to control remote access but is less fine-tuned than NTFS permissions.
And yes—the best practice is to use both together: set share permissions to be permissive (typically Full Control) and rely on NTFS settings for detailed, local security control. This ensures you have robust security for both local and network access.
Great summary!
