Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Say I have a folder on Server1 called folder1 and I share folder1 and the Share permissions for that folder allow all users to read only, and then i create a subfolder in folder1 lets call it subfolder1,

Now the only permissions I can change on subfolder1 are the NTFS permissions, However if I want 1 specific user to have write access in subfolder1 id add that user to the NTFS perms of subfolder1 lets call the user John Doe,

Now when John Doe comes to write in that folder, Will the SMB Permisions of the share Stop him from writing to folder1 & subfolder1 as the share permissions only allow read access to all user or will John Doe be able to write to the sub folder.

Side Question

If Folder1 share permissions allowed everyone write access, but folder1s NTFS permisions denied everyone write access which would be enforced?

share|improve this question
up vote 1 down vote accepted

The most restrictive permissions are enforced.

See also:

share|improve this answer
How about the first question though, if there is strict perms on the root of the share folder do child folders follow suit even if the NTFS perms of the sub folder allow certain users full control? – squarebear Jun 24 '11 at 9:26
@Shutupsquare: You specify that you set the share permissions, so the answer is yes. Share permissions apply to the entire contents of the file share regardless of the NTFS permissions of the actual directory on disk being shared or those of any subdirectories. You need to set the share permissions such that all users who need it will have full access, and rely on NTFS permissions to provide the fine-grained control you desire. – Patches Jun 24 '11 at 15:03
thats hit the nail on the head for me, thanks – squarebear Jun 24 '11 at 15:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.