Understanding Share Permissions

As mentioned in the previous section, the level of access that a user has to a share on the network will depend on the level of share permission afforded that user (in reference to the share). When you share a volume or folder on the network, the default share permission assigned to the newly created share is Read-only for the Everyone group (all users on the network belong to the Everyone group ).

A share permission is merely the access level that you give to a particular user or group of users in relation to a particular share on your file server (or other server on the network). Setting the share permission for a folder or volume also sets the share permission level for the files contained in the share.

Share permissions can be set at three different levels: Full Control, Change, and Read. A description of each share permission level follows :

  • Full Control . This permission level allows the user to modify file permissions and perform all the tasks that are permitted by the Change and Read permission levels. This access level gives a user the same access that an Administrator would have to the share.

  • Change . This permission level allows the user to create folders in the share and add new files. Users can change data in the files and add new data to the files contained in the shared folder.

  • Read . This permission level allows the user to display folders and files in the share, open the files in the share (in read-only mode), and run program files that are contained in the share.

Permission levels are set on the Share Permissions tab of the share's Properties dialog box. Right-click on a shared folder or drive in the Windows Explorer and then select Properties. Then click the Share Permissions tab on the Properties dialog box.

Figure 9.7 shows the Share Permissions tab for a network share. You can select the permission level for a particular user or group by clicking the appropriate permission level check box.

Figure 9.7. Set the share permission level for a user or a group.


You will probably have to add users or groups to the Group or User Names list provided on the Share Permissions tab. This is accomplished using the Add button. Once you have a user or group listed in the Group or User Names list, you can set the permission level for that group or user.



Access levels and other properties related to user accounts are often assigned to users via their group memberships. A group is a number of network users. Assigning different access levels and other security- related features to groups is much easier than assigning these properties to individual users. For example, if all your accountants need access to the same files and need to have the same access levels, you can assign the access levels to the group "accountants" and then add users who are actually accountants to the group. These tasks are actually performed in the Active Directory Users and Computers snap-in.

Absolute Beginner's Guide to Networking
Absolute Beginners Guide to Networking (4th Edition)
ISBN: 0789729113
EAN: 2147483647
Year: 2002
Pages: 188
Authors: Joe Habraken

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net