Check access permissions on shares [NTFS Permissions vs Share Permissions]
Check access permissions on shares
"...With permission sets often overlapping between shares and NTFS, permission problems can sometimes be tricky to track down. In an effort to provide some simplicity while still maintaining some semblance of security, some organizations just provide Full Access permissions for shares and limit individual NTFS permissions.
Organizations that aren't comfortable with this approach need tools to help them along the way. One of the tools from the Windows Server 2003 Resource Kit, Server Share Check, can help in these efforts.
Server Share Check lists all shares from a specified server. It also enumerates the users and groups that have access as well as the level of access that each has.
Server Share Check also works on Windows 2000 and Windows XP machines. You can download the Windows Server 2003 Resource Kit from Microsoft's Web site. The filename is Srvcheck.exe.
..."
Missed this Resource Kit utility in the past...
I've been in the NTFS vs Share permission boat before and have seen the fall-back to Share = Full Access too many times. Or much worse the opposite, permissions are controlled at the Share and Everybody has full NTFS permissions... shudder.
Added to toolkit.
Posts
