Share vs file is quite simple in the fact that nt/2000 will take the most restrictive of the two and apply it.remembering this is not so simple :-) (i forget as well)
In a security sense, most (if not all) trojans rely on standard default NT/2000 settings. By adjusting these settings on install you can protect yourself. We use Domain users = change domain Admins = full on the share and adjust the file permissions if required. This goes back to our principal that "every one will be a domain user". For use there is only one share that is the exception to this. As pointed out, this may not scale for LARGE organisations, but large organisations can also afford other toolsets, like IDS systems and specialist resources, that your "small-average" site cannot justify. So when thinking of best practices in large organisations it is best to think of the whole picture and see if it fits with your requirements. cheers Dean > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] > > Sent: Wednesday, April 17, 2002 5:39 AM > > To: NT 2000 Discussions > > Subject: Share/Default Permissions > > > > > > > > Hello, > > > > This is just a basic question.... While rambling in the mess > > which I call a > > 'brain' > > > > When you create a share - which permissions do you set? There > > are so many > > conflicts.... at current I just set :- > > > > Domain Admin - Full Control > > Authenticated Users - Change > > > > > > Robert Rutherford > > MIS Department - DEK International GmbH > > +44 (0)1305 208232 > > +44 (0)7970 122362 > > > > > > > > ************************************************************** > > ****************************** > > This E-mail and any files transmitted with it are in commercial > > confidence and intended solely for the use of the > individual or entity > > to whom they are addressed. If you have received this > E-mail in error > > please notify the Administrator by E-mail ([EMAIL PROTECTED]). > > > > Any views or opinions expressed are solely those of the > author and do > > not necessarily represent those of DEK Printing Machines > > Ltd., or its affiliates. > > ************************************************************** > > ****************************** > > > > > > ------ > > You are subscribed as [EMAIL PROTECTED] > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe send a blank email to %%email.unsub%% > > > > ------ > You are subscribed as [EMAIL PROTECTED] > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe send a blank email to %%email.unsub%% > ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ********************************************************************** This email is not an official statement of the Waikato Regional Council unless otherwise stated. Visit our website http://www.ew.govt.nz ********************************************************************** ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
