NTFS & Share permissions.

NTFS Permissions vs Share Permissions

• One of the most critical security principles is permission management which is used to ensure that users has set appropriate permissions and that usually means knowing the difference between sharing permissions and NTFS.
• Share and NTFS permissions work separately but ultimately used for the same purpose (to prevent unauthorized access).
• However, when NTFS interacts with sharing permissions or when a shared folder is in a separate shared folder with different sharing permissions, users may not be able to access their data or may have higher access levels than security administrators intend.
• Here are key differences between the permissions for sharing and NTFS, so you'll know what to do.

What is NTFS?

• A file system is a way to organize a disk, to show how data is stored on the drive, and what types of information can be added to files.
• NTFS (NT File System) means NTFS (New Technology File System). 
• NTFS is the latest file system used by the Windows NT operating system for file storage and retrieval. 
• The file allocation table (FAT) file system was the main file system in older Windows operating systems prior to NTFS, and was designed for small disks and basic folder structures.
• NTFS supports wider file sizes and hard drives, and is safer than FAT. 
• It is the file system used in Microsoft's operating systems Windows 10, Windows 8, Windows 7, Windows Vista, Windows XP, Windows 2000 and Windows NT.

NTFS Permissions

• NTFS permissions are used to manage access to the files and folders that are stored in NTFS file systems.
• To see what kind of permissions you will be extending when you share a file or folder.

1. Right click on the file/folder
2. Go to “Properties”
3. Click on the “Security” tab

Besides Full Control, Change, and Read that can be set for groups or individually, NTFS offer a few more permission options.

• Full control- It allows users to read, write, edit, and remove files and sub-folders. Alternatively, users can alter settings on permissions for all files and sub-directories.
• Modify- Allows users to read and write of files and sub-folders; also allows deletion of the folder.
• Read & execute- It lets users access and execute executable files, like scripts. List folder content: Allows browsing and listing of files and sub-folders as well as executing files.
• Read- Allows users to view the folder and sub-folder contents.
• Write- Allows users to add files and sub-folders, allows you to write to a file.

Share Permissions

• If you are sharing a folder and want to set the permissions for that folder, this is a share. Essentially, the shared permissions determine the type of access that others have to the network-wide shared folder.
• To see what kind of permissions you will be extending when you share a folder.

1. Right click on the folder
2. Go to “Properties”
3. Click on the “Sharing” tab
4. Click on “Advanced Sharing…”
5. Click on “Permissions”

Configuring Permissions