RE: Share Permissions

["Jennifer Fountain" <JFountain () rbinc com>]

Let me get a better understanding as to what you do... So I will explain
how I do it - I set the share permissions to full for "domain users"
(not everyone ), add a local group to the server, add a domain global
group and add the domain global group to the local group. I, then, add
the local group to the folder (allow all subfolder to inherit rights).
Whenever someone needs rights to that folder, I add the to the domain
global group.  Is that similar to what you do?  If so, I think this is
pretty secure while alleviating a lot of the admin overhead.  Please
correct me if I am wrong.   

-----Original Message-----
From: Benjamin Meade [mailto:ben () lanwest com au] 
Sent: Monday, June 09, 2003 3:10 AM
To: 'Security-Basics'
Subject: Share Permissions



Hey all,

Just wondering in Win2K server, when I share a folder, I set the share
permissions to full access for everybody, and then control access using
the file permissions. (Basically cos it cuts down on administration, and
I'm lazy.) Are there any security issues running this way, or is it much
of a muchness?

Thanks,

Benjamin Meade
System Administrator
LanWest Pty Ltd
Ph:  (08) 9440 3033
Fax: (08) 9440 3370



------------------------------------------------------------------------
---
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
analysts! The Gartner Group just put Neoteris in the top of its Magic
Quadrant, while InStat has confirmed Neoteris as the leader in
marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access
in about an hour, with no client, server changes, or ongoing
maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------