share and ntfs permission question

I have two questions:

When combining share and ntfs permissions the one with the least privileged makes the effective permissions. In a large user environment, is it best practice to give a group 'full control' under the share permission and then modify the ntfs permissions

Second question:

What is the 'system' group that is included when i assign ntfs permissions?

Find more posts tagged with

Comments

eurotrash

1. yes
2. the OS itself

gojericho0

why does it give the system access to every folder\file, is there an example as to why it would need access to anything besides system file?

eurotrash

don't quote me on this, but likely because many services start up under the System security context, and therefore it is a good idea to have the System group added automatically to all the files.

open services.msc and check out the Log On As column.

Quick Links

All Categories
Recent Posts
Activity
Unanswered
Groups
Best Of