NTFS permissions vs. Share permissions?

[Pundit]

For me to share a folder over a LAN, do I have to give both ntfs and share permissions to the user?

 

[Thor86]

Yes, in NTFS, it overrides Share permissions.

 

[Saltin]

Yes, in NTFS, it overrides Share permissions

That's not exactly true.

When combining share and NTFS permissions, the most restrictive permissions apply.

 

[jonmullen]

Originally posted by: Saltin

Yes, in NTFS, it overrides Share permissions

That's not exactly true.

When combining share and NTFS permissions, the most restrictive permissions apply.

That is a really good way to put it.

 

[DynaGlide]

If you simply Share the folder and do not apply any File Level/NTFS Permissions, then the least restrictive apply, which in this case would be the share level permissions. If that's all you need, then simply avoid assigning any NTFS permissions. ie: Manage this from the "Sharing" option on the right-click menu, not the "Properties|Security" tab. Keep in mind that the default permission on a shared folder is Everyone/Full Control, so anyone on your network, regardless of how they got there, will be able to read, change, and delete the contents of this shared folder.

Reinforcing the comment from Saltin... For Share Level permissions, the least restrictive apply. When combining Share Level and NTFS permissions, the most restrictive apply. When no NTFS permissions are specified, then the least restrictive (Share Level) win the day.

 

[Saltin]

When no NTFS permissions are specified, then the least restrictive (Share Level) win the day.

If you simply Share the folder and do not apply any File Level/NTFS Permissions, then the least restrictive apply, which in this case would be the share level permissions

NTFS permissions are always specified on files and folders on an NTFS partition, whether they be specified manually, or by inheritance from a parent object.

When you share a folder out, the Share permissions and the NTFS permissions combine to secure the resource. The most restrictive of these permissions applies. Im not sure what your statement above is getting at. Maybe you are speaking about a FAT partition? If so, why worry about security at all? There is none.

It's a pretty simple concept, and there really is only one answer. You're confusing the issue maybe?