2-7: Understand Shared Folder Permissions (SMB Permissions)

Solution overview

Type of solution

Guidance

Features and tools

Shared folders, net share

Solution summary

In most scenarios, share permissions should be Everyone::Allow::Full Control, and NTFS permissions should be used to secure the folder according to business requirements. Unfortunately, the default SMB permissions applied to a new shared folder are usually Everyone::Allow::Read, which is too restrictive to be useful in most scenarios. The net share command can create a share with specific permissions, such as Everyone::Allow::Full Control.

Benefits

Increased manageability of shared folder security

Introduction

The permissions associated with a shared folder have long been called share permissions ...

Get Windows® Administration Resource Kit: Productivity Solutions for IT Professionals now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.