Shares and Permissions

Sharing Permissions within a Group

Let’s create two folders on the desktop,

1) Accounting

2) Development


Right Click on Account Folder->Properties->Sharing Tab->Click on Share button->Click on Share->Done.


shares and permission1


shares and permission2


⇒ Click on Share.

shares and permission3


⇒ Select the users whom you want to give access.


shares and permissio4


⇒ Click on Done.


Explain about the permissions ?



In order to make a resource to be available over the network and to be accessed by network users, we need to implement sharing.

The moment we create a share on a server, the server acts as a file server.

Share a folder.

Go to the properties of the folder >> security Tab.

Here you can check which user have - what kind of permissions


shares and permission6


You can also add permission to the new user form EDIT.


shares and permission7


shares and permission8



Using permissions an administrator can either allow or deny access to a resource.

Resource can be a network resource or local resource


Permissions are two types

  1. Share level
  2. File system or NTFS


Share level Permissions:

Share level permissions are applied over the network.

Share level permissions are not applied on the local machine where the resource is existing.


There are three types of share level permissions

Full control          RWXDO (Read/Write/Execute/Delete/Ownership)

Change RWXD Read        R


NTFS Permissions:

NTFS permissions are powerful permissions and they offer file and folder level security. NTFS permissions are useful for securing locally available resources.


NTFS Features:

File/folder level security




Reduced fragmentation


Volume shadow copies services


Separate recycle bin for each user

NTFS permissions

Full control          RWXDO

Modify RWXD

Read & Execute                RX

List folder contents L

Read      R Write RWX


Home Folder and Configuring it 

The home folder is a user personal folder. It will be with the user profile.

Where ever user logged in a home folder will be mapped as a Network Drive.

To configure it, create a shared folder.

Go to user properties >> Profile Tab

Give the share path under home folder section and select a drive letter.


shares and permission9


Taking Ownership on Folder 

Go to any share folder properties

Under security tab select ‘Advanced’.


shares and permission10


shares and permission11


Go to owner >> Edit.


shares and permission12


Select and Click on Apply – OK


shares and permission13


You can verify the owner and replace the owner back with same steps.


Default Share Variables

.Default Microsoft Windows hidden shares are as follows:

ADMIN$ - The default system root or Windows directory.

C$ and x$ - The default drive share, by default C$, is always enabled. X$ represents any other partitions or drives found by Windows that will also be shared, e.g. D$, E$, etc.

FAX$ - Share used by fax clients to access cover pages and other files on a file server.

IPC$ - See the IPC definition for additional information about IPC.

PRINT$ - Share used by printers, enabling remote administration on printers.

NETLOGON: This is a resource that is used on domain controllers.

SYSVOL: This is a resource that is used on domain controllers.


Access Control List in Windows Server

An access control list (ACL) is an ordered list of access control entries (ACEs) that define the protections that apply to an object and its properties. Each ACE identifies a security principal and specifies a set of access rights allowed, denied, or audited for that security principal.


Topics Summary