Share Permissions

The first line of security for shares is in the share permissions. Share permissions are limited as shares can be enabled on CD/DVD drives, FAT volumes, NTFS volumes, and reFS volumes. The configurable share permissions are limited to Full Control, Change, and Read. Full Control permissions allow users to manage all data and to reset permissions. Change allows users to manage all data, and Read just allows users to read the data. Because share permissions are not very granular, as a best practice shares should be created only on NTFS and reFS volumes to allow for increased data security.

When shares are created on NTFS or reFS volumes, both the Share and NTFS folder and file permissions are applied to the user. Windows Server ...

Get Windows Server® 2012 Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.