[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference decwet::windows-nt

Title:Windows NT
Notice:See note 15.0 for HCL location
Moderator:TARKIN::LIN.com::FOLEY
Created:Thu Oct 31 1991
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:6086
Total number of notes:31449

6049.0. "Elementary sharing question" by SHRCTR::PJOHNSON (Vaya con huevos.) Tue May 27 1997 17:03

I'm Pete. Dave is on my team and I want to give Dave read access to
the files in a folder (D:\project) on my NT4 system. Ed is also on my
team and needs read/write permission on the same files in the same
folder. We're all in the Digital1 domain.

How should I do that? Create a local group with ??? permission on the
disk, folder, and files and add Dave and Ed to the local group?

Thanks,
Pete
T.RTitleUserPersonal
Name
DateLines
6049.1INTONE::BONAZZOLITue May 27 1997 19:099
    A single local group will only be beneficial if Dave and Ed
    need the same access.  If they need different access, add
    their individual accounts to the shared resource (folder) or 
    use two separate local groups each containing 1 member.  If using 
    NTFS on your local system where the files reside, ensure 
    that the security settings on these files is not more 
    restrictive than the share settings.
    
    Rich
6049.2But...but...SHRCTR::PJOHNSONVaya con huevos.Wed May 28 1997 03:5315
Rich,

Actually, perhaps I used too simple an example. What I'm having
trouble with is where to set permissions. If I want to share a file,
do I need to share the folder it's in? And do I need to share the
drive that folder is on? And when I share something, there are two
places to set permissions: there's a permissions button on the sharing
tab, and there's a permissions button on the security tab.

I guess that, given the example I used, I was looking for a
step-by-step detailed list of appropriately sharing the file so I
could apply that to a group of many more files and many more people.

Thanks,
Pete
6049.3Try thisRDVAX::akocstdhcp104-25.ako.dec.com::levyRun Like an AntelopeWed May 28 1997 10:2540
Hi Pete - 

> If I want to share a file, do I need to share the folder it's in? 

Yes...or a folder above it somewhere in the heirarchy above it.

> And do I need to share the drive that folder is on? 

No.  That should automatically be done by NT.  It is an administrative 
(hidden) share and can be gotten to by using the drive letter and a 
dollar sign (D$).  I believe that you must be an administrator or backup 
operator to connect to the administrative share for the drive.

> And when I share something, there are two
> places to set permissions: there's a permissions button on the sharing
> tab, and there's a permissions button on the security tab.

What I always do is set the file permissions to Everyone Full Control.  
Then, I let the share permissions take care of access to the files.

If you want to be super cautious, you can set the file permissions the 
same as the share permissions, but as an earlier reply said don't make 
the file permission MORE restrictive than the share permissions.

When a person connect to the share, the system first checks the sharing 
permissions for the type of access to the sharepoint.  Then, as each file 
is accessed, the file permissions come into play.  

You can give FULL CONTROL on the file permissions, but if the share 
permission says READ ONLY, then the only access (from a remote system) 
the user gets is READ ONLY.  If the user connected to the administrative 
share or had access to the local computer, then the file permissions 
would take effect.

You can give READ ONLY on the file permissions, and then regardless of 
the share permissions, the (remote) user only gets READ ONLY.

Does that help or confuse?

	dave
6049.4SHRCTR::PJOHNSONVaya con huevos.Wed May 28 1997 12:478
Ah, Dave, good to hear from you, O Wise One!

That helped a lot and turned out to expose the source of my problem,
which has now passed.

Thank you *so* much!

Pete