NTFS and share permissions both control access to files and folders, but they work differently. Understanding when to use each and how they interact is important for securing your file shares. In this guide, I’ll explain the difference between NTFS and share permissions and the key differences.
What are Share Permissions?
Share permissions control access to folders shared over the network. They only apply when a user accesses the folder remotely, not when logged in locally. Share permissions are limited to three levels: read, change, and full control. You can only set them at the folder level, not on individual files. By default, when you share a folder, the “Everyone” group gets read access.
To view a folders share permissions, right click the folder, select properties and sharing.
Click “Advanced Sharing” and then Permissions.
What are NTFS Permissions?
NTFS permissions control access to files and folders on the file system. Unlike share permissions, they apply whether the user accesses the file locally or over the network. NTFS permissions are more granular because you can set access at the file level, not just the folder level, and control specific actions like read, write, modify, and full control. NTFS permissions also support inheritance, so permissions set on a parent folder automatically apply to subfolders and files.
You can view NTFS Permissions by right clicking a file or folder, select properties and security.
NTFS vs Shared Permissions: Key Differences
- Shared permissions are used on the shared folder only (does not apply to subfolders).
- NTFS permissions are used to control access to root and subfolders.
- Share and NTFS permissions are used together to provide access to folders over the network.
- NTFS permissions allow you to apply different permissions to each folder.
- NTFS permissions can apply to both local and network users.
In the diagram below, I have a shared folder called “Share” on a Windows file server. The share permissions I set on the “share” folder only apply to this folder. To change access to the subfolders I would need to use NTFS permissions. With NTFS permissions I can apply different permissions to each folder.
