|
Posted by Steven L Umbach on November 2, 2005, 3:53 am
If you were Registered and logged in, you could reply and use other advanced thread options
NTFS folder permissions apply to any users that logs on locally or via a
share. Share permissions apply only to network users accessing the share and
for such a user the most restrictive of the two settings will apply. Share
permission of change allows a user to access the share and write and delete
on that share. If you do not need that then set the share permissions to
read which allows the network user to only read/list/execute.
Everyone in your situation would mean anyone that can authenticate to the
computer unless the guest account is enabled which could then potentially
allow everyone and anyone access to that folder. I usually change everyone
to authenticated users. That way if the guest account is enabled somehow
that folder is still protected from anonymous access. Firewalls are an
important part of network security but be sure to have a strategy for
malware prevention, detection, and removal and for keeping current with
critical security updates at Windows Updates. --- Steve
http://www.microsoft.com/athome/security/protect/windowsxpsp2/Default.mspx
--- Protect Your PC tips from MS.
> Recently I have made some major changes to my PC which make me think that
> I
> need to review my file sharing policy.
>
> I have moved from dial-up internet to broadband and installed a 3Com
> router
> firewall.
>
> The home network has 3 PCs which have file sharing enabled on all drives
> The Share Permissions tab allows 'Network' change/read permissions. The
> 'Security' tab allows 'Everyone' full control. (MS Office gives problems
> if I don't allow full access). This sounds a bit risky but as I understand
> it 'everyone' means anyone who logs on with the correct username and
> password. However, I must admit to being confused between the W2k
> 'Shares' properties 'Share Permissions' and 'Security'.
>
> Since the NAT on the router makes the PCs invisible to the outside world
> and
> the file shares are protected by password access then it seems safe.
>
> My installation is:
> W2000
> Office 2000
> Outpost PFW
> The PCs are not logged on with admin privileges except when doing Windows
> updates.
> The router provides IP addresses to the PCs
>
> Any thoughts?
>
> Davy
>
>
>
|