34,333
edits
Changes
→Understanding and Configuring Share Permissions
== Understanding and Configuring Share Permissions ==
As outlined at the beginning of this chapter, Windows Server 2008 provides two levels of permissions for shared files and folders, namely ''share permissions'' and ''file and folder permissions''. Share permissions are apply when access is made via the network. When shared files and folders are accessed locally from the server on which they reside these permissions server no purpose. File and folder permissions, on the other hand, take effect both when accessing files and folders both locally and over the network. In the case of network access to a shared files and folder, the shared permissions are applied first, followed by any file and folder permissions. The key issue to note is that file and folder permissions provide a far greater level of control over access than the more more general permissions options provided by share permissions. In this section, share permissions will be covered. For details on file and folder permissions refer to the chapter entitled [[Understanding Windows Server 2008 File and Folder Ownership and Permissions]].
Share permissions are granted on a per user and per group basis. In addition to allowing a cap on the number of concurrent users accessing a share to be defined, share permissions also provide three permission options, each of which can be be set to ''Allow'' or ''Deny'':
Permissions are cumulative in that a user will inherit the permissions of all the groups of which he or she is a member. If a permission is ''Denied'', however, it overrides any cases where that permission may have been granted. For example, if a user is a member of a group where full control is provided over a folder, and also a member of a second group where full control is specifically denied, the user will be deined full control regardless of the fact that it was granted in the first group.
To configure share permissions, start Computer Management, connect to a remote server if not working on local shares, unfold System Tools and select ''Shares'' to list all currently shared folders. TO To configure share permissions for a folder, select it from the list, right click and select ''Properties''. In the properties dialog select the ''Share Permissions'' tab as illustrated in the following figure: