Best Practices on Windows Shares SMB permissions and NTFS
This apply to windows server 2003, windows server 2008 and windows server 2012
Share Permissions:
- Folder $
- Click on Advanced Sharing
- Share the Folder
- Click on Permissions
- Remove the default Everyone = Read Permissions
- Add Administrators = Full Control
- Add Authenticated Users = Full Control
NTFS (Security Tab Permissions):
- Click on the Security Tab (NTFS Permissions)
- Remove Inheritance
- Remove Users = Read
- Keep Administrators = Full Control
- Keep System = Full Control
- Group_Folder_Modify = Modify
- Group_Folder_Read = Read
You have now a clean and secure share. That's all
0 comments:
Post a Comment