share and ntfs permission question
gojericho0
Member Posts: 1,059 ■■■□□□□□□□
I have two questions:
When combining share and ntfs permissions the one with the least privileged makes the effective permissions. In a large user environment, is it best practice to give a group 'full control' under the share permission and then modify the ntfs permissions
Second question:
What is the 'system' group that is included when i assign ntfs permissions?
When combining share and ntfs permissions the one with the least privileged makes the effective permissions. In a large user environment, is it best practice to give a group 'full control' under the share permission and then modify the ntfs permissions
Second question:
What is the 'system' group that is included when i assign ntfs permissions?
Comments
-
gojericho0
Member Posts: 1,059 ■■■□□□□□□□
why does it give the system access to every folder\file, is there an example as to why it would need access to anything besides system file?
-
eurotrash
Member Posts: 817
don't quote me on this, but likely because many services start up under the System security context, and therefore it is a good idea to have the System group added automatically to all the files.
open services.msc and check out the Log On As column.witty comment