RE: QNTC authority

[Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>]

Well I guess that if people cannot see the share you gain security by
obscurity.  The NTFS permissions is backed up and restored while share
permissions will be lost.  NTFS permissions will not allow you to access the
share even if the share permissions are public full access.  All the share
permissions will really do is hide the share from the users.  In fact if
someone knows the path to the share directory, \\server\drive$\path and NTFS
permissions is not set but share permissions are set, they can get to the
data by bypassing the share name.

-----Original Message-----
From: Pete Hall [mailto:pbhall@xxxxxxxxxxxxx]
Sent: Saturday, May 10, 2003 2:24 AM
To: Midrange Systems Technical Discussion
Subject: RE: QNTC authority


At 17:34 05/09/2003, Chris Bipes wrote:
>Is the share setup as a read only share?  I you checking share authority or
>NTFS authority.  We define our shares as public full and use NTFS
authority,
>which is much more secure and backup with the files.  Share authorities are
>not backup with the files and cannot be restored.

Doesn't that leave you a little exposed from the NT side? Anyone that gains 
access to the network can have their way with the NT share.