shared-folder permissions

---

Assign and modify permissions on a shared folder.

Procedures

Shared-folder permissions are an alternate means for controlling the level of access to file resources on Windows 2000-based file servers. As discussed in permissions, the primary means for controlling the level of access to file resources on an NTFS volume is to assign them suitable NTFS permissions. When the folder is shared over the network, the shared-folder permissions can be left at their default setting of Full Control for Everyone or can be customized as desired, with the result that the NTFS and shared-folder permissions are combined.

To assign shared-folder permissions, you must first be able to access the icon of the shared folder. You can do this using Windows Explorer, My Network Places, or from the Search Results of the Search Assistant accessed through Start → Search → For Files or Folders. The following procedures assume you have already located the icon for the folder that you have shared and whose permissions you want to assign or modify.

Assign Shared-Folder Permissions

Right-click on shared folder → Sharing → Permissions → Add → select domain → select user or group → Add → OK → allow or deny shared-folder permissions → Apply or OK

Unless you allow or deny different permissions, when you assign shared-folder permissions to a user or group, the default permission that is assigned is Allow Read.

You can select more than one user or group at a time in the “Select Users, Computers, or Groups” dialog box.

When you try to allow or deny different combinations of shared-folder permissions, you will discover that not all combinations are allowed. For example, if you try to allow Full Control, then all three checkboxes under Allow automatically become checked. Table 4.14 shows the permissible combinations of shared-folder permissions that can be assigned using the Sharing tab. This table works only if you are allowing permissions; if you both allow and deny permissions, other combinations are possible.

Table 4-14. Allowable Combinations of Shared-Folder Permissions

	Automatically Selects . . .
Selecting . . .	Full Control	Change	Read
Full Control
Change
Read

Modify Shared-Folder Permissions

Right-click on shared folder → Sharing → Permissions → select name → allow or deny shared-folder permissions

For more information see Section earlier in this article.

Notes

• To assign shared-folder permissions, the folder must of course be shared.

• Unlike NTFS and print permissions, there are no advanced (special) shared-folder permissions you can configure.

• To learn more about how to create and manage shared folders on the network, see shared folder in Chapter 4 and Chapter 4.

• If you do modify the default shared-folder permissions, make sure you understand how NTFS and shared-folder permissions combine. See permissions for more information.

See Also

net share, offline files, ownership, permissions, printer permissions , shared folder, Shared Folders