1. Share permissions exist because of FAT volumes.
2. If you don't want people to browse to the share, all you have to do is
make it a hidden share and provide shortcuts to it for the appropriate
people. Not having access to a share doesn't prevent it from showing up on
your network.

Laura
----- Original Message -----
From: "Chris Davis" <chris.daviscomputerjobs.com>
To: <FOCUS-MSsecurityfocus.com>
Sent: Thursday, August 23, 2001 11:19 AM
Subject: RE: Windows 2000's Everyone permission

> Given: A typical salary spreadsheet created by a typical payroll employee
> which has been placed on a shared folder so that other payroll employees
can
> access it as needed.
>
> Share permissions: Everyone full access: Everyone in the company knows
> where to find the salary spreadsheet, even if they can't open it when
logged
> on using their own account.
> Share permissions: Payroll full access. Everyone no access: Payroll
knows
> where to find the salary spreadsheet. Other people generally do not.
>
> Share permissions serve to obfuscate. That's all they do. That's what
> they're for.
>
> If you Really didn't need share permissions for anything at all, they
would
> not exist. Folders would just be "shared" or "not shared".

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]