Tech Master
OneStopTechnical Forum
OneStopTechnical Forum
| Feature / Aspect | Share Permissions | NTFS Permissions | Security Settings (ACLs) |
|---|---|---|---|
| 📍 Where Configured | Sharing tab → Advanced Sharing | Security tab | Security tab → Advanced |
| 🔗 Applies To | Access over the network (SMB/UNC paths) | Access over local + network | Full NTFS model incl. permissions, ownership, audit |
| 👥 User Scope | Users/groups accessing over network | Users/groups both local and domain | Users/groups + audit subjects |
| ⚙️ Common Settings | – Read – Change – Full Control | – Read – Write – Modify – Full Control | – Permissions – Ownership – Auditing |
| 🔐 Granularity | Basic (3 levels) | Highly granular (individual file/folder level) | Most granular (includes inheritance, audit, owner) |
| 🛡 Effective Access Rule | Most restrictive applies when combined w/ NTFS | Most restrictive applies when combined w/ share | Depends on entire ACL evaluation |
| 🧰 Tools Used | File Explorer, net share | File Explorer, icacls, Get-Acl, Set-Acl | Same as NTFS + advanced UI |
| 🧪 Audit Support | ❌ Not supported | ✅ Supported via ACL | ✅ Includes full auditing setup |
| 📁 Inheritance Support | ❌ No inheritance | ✅ Supports inheritance from parent folder | ✅ Supports inheritance + advanced rules |
| 🔍 Visibility Control | ❌ Cannot hide objects from unauthorized users | ✅ With ABE + NTFS permissions | ✅ With ABE + NTFS |
| 🧯 Fallback When Missing | No access via network if not shared | No access at all if NTFS denies | NTFS security model is always enforced |
| 🧠 Best Practice | Set to Full Control for allowed groups, manage access with NTFS | Use NTFS to define actual access rights | Use to set ownership, audit policies, inheritance |
“Give Full Control in Share Permissions, and restrict access using NTFS Permissions for precision. Use Security (ACLs) for advanced control and auditing.”