Reasonable setting of shared folder access rights in Windows

        In order to ensure the security and stability of the Windows system, many users use the NTFS file system, so the access permissions of the shared folder are not only restricted by the "shared permissions", but also by the access rights contained in the ACL (access control list) of the NTFS file system. . Below, the author takes the "CCE" shared folder as an example to introduce how to properly set the access rights of the "cceuser" user to the "CCE" shared folder, thereby enhancing the security of the shared folder.

1. Sharing permission settings

In the Explorer, right click on the "CCE" shared folder, select "Properties", switch to the "Share" tab, click the "Permissions" button , the "CCE Permissions" setting dialog box pops up, click the "Add" button, add the "cceuser" account to the "Group or User Name" list box, where the "cceuser" account must read the "CCE" shared folder. And write permission, so I want to give the account full control permissions, and finally click the "OK" button to complete the share permissions settings.

2. NTFS access permissions

more than just set up shared access "CCE" shared folder, after all, "CCE" folder is shared by the "shared access" and "NTFS Access rights are double-constrained. If the NTFS file system does not allow the "cceuser" user to access the share, it will not work, and the account should be given reasonable NTFS access rights.

After switching to the "Security" tab in the "CCE" Shared File Properties dialog box, first add the "cceuser" account to the "Group or User Name" list box, and then the account number. Set access rights. After selecting the "cceuser" account, select the "Read and Run, List Folder Directory, Read, Modify, and Write" items in the "Cceuser Permissions" list box, and finally click the "OK" button.

After the above operation, the access permission setting of the “cceuser” user of the “CCE” shared folder is completed, and the setting methods of the shared folder access rights of other users are the same, and will not be described again.