Combining Shared Folder and NTFS Permissions

If you choose to apply both shared folder and NTFS permissions to a folder, you need to consider which permissions will actually apply. For example, let’s say that you granted a user named Paul the shared folder permission Read, and the NTFS permission Full Control. When accessing this folder over the network, the more restrictive permission of the two always applies, in this case Read. However, if Paul were to log on to the system locally, only the NTFS permissions would apply, and he would be granted Full Control. Always keep this concept in mind when attempting to troubleshoot user access to shared folders.

Author: Dan DiNicolo

Dan DiNicolo is a freelance author, consultant, trainer, and the managing editor of He is the author of the CCNA Study Guide found on this site, as well as many books including the PC Magazine titles Windows XP Security Solutions and Windows Vista Security Solutions. Click here to contact Dan.