share permissions vs. folder permissions

[mlowe9]

I had a question about sharing folders on Windows. When setting up a shared folder, I normally set the share permissions to everyone and the folder permissions to the permissions I want on the folder (and the share).

My question: What is the purpose of setting share permissions when the folder permissions accomplish what I want? Why would I do it differently than I do?

Thanks
Matt

 

[minxca]

Share permission & security permission are used when you access remotely. Security permission is used when you access locally/login interactively

 

[mlowe9]

But why would I want someone to have access to a folder locally and not remotely?

 

[bofhrevenge2]

If you want to make all files under a share read only then using Read only on the share would mean that no matter what NTFS permisions are set remote users still only have read only.
Also setting share permissions to change will prevent remote users from altering NTFS permissions which can be very handy, especially if you have user folders where the user has full permissions and they keep removing the administrator from the ACL.

 

[mlowe9]

Thank you both for responding.

So the share permissions are for giving/removing permissions to the folder, not file permsissions?

 

[bofhrevenge2]

No share permissions on an MS network were originally for protecting FAT partitions and still are in a way if you are still using FAT. Since Windows NT/2000/XP which use the NTFS file system (which has local file security) this is not as important.
Essentially NTFS (file) security is used to secure files both locally (to people sat at the PC or server) and remotely.
Share permissions are specifically for assigning permissions to remote users but are not essential if you are using NTFS.
It is good practice to use the 'Change' share permission as it prevents remote users messing with NTFS permissions, but NTFS (file) permissions are far more versatile.

Hope that helps.

 

[bofhrevenge2]

http://www.cramsession.com/articles/files/share-versus-ntfs-permiss-9162003-1702.asp