Set permissions on a shared resource

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To set permissions on a shared resource

To open a Control Panel item, click Start, click Control Panel, and then double-click the appropriate icon.
In the console tree, click Shares.

Where?
- Computer Management/System Tools/Shared Folders/Shares
In the details pane, right-click the shared resource that you want to set permissions for, and then click Properties.
On the Share Permissions tab, make any of the following changes, and then click OK:
- To assign permissions to a user or group for a shared resource, click Add. In the Select Users, Computers, or Groups dialog box, look for or type the user or group name, and then click OK.
- To revoke access to the shared resource, click Remove.
- To set individual permissions for the user or group, in the Permissions forgroup or user box, select the Allow or Deny check boxes.

Note

To open Computer Management, click Start, click Control Panel, double-click Administrative Tools, and then double-click Computer Management.

Open Windows Explorer.
Right-click the shared folder or drive that you want to set permissions for, and then click Sharing and Security.
On the Sharing tab, click Permissions, make any of the following changes, and then click OK:
- To assign permissions to a user or group for a shared resource, click Add. In the Select Users, Computers, or Groups dialog box, look for or type the user or group name, and then click OK.
- To revoke access to a shared resource, click Remove.
- To set individual permissions for the user or group, in the Permissions for group or user box, select the Allow or Deny check boxes.

Note

To open a Control Panel item, click Start, click Control Panel, and then double-click the appropriate icon.

Important

Share permissions apply only to users who gain access to the resource over the network. They do not apply to users who log on locally, such as on a terminal server. In these cases, use access control on the NTFS file system to set permissions. For more information, see Related Topics.

Notes

You must be logged on as a member of the Administrators group, Server Operators group, or Power Users group to complete this procedure. If your computer is connected to a network, network policy settings might also prevent you from completing this procedure.
You can use Shared Folders to manage shared resources on both local and remote computers. For information about how to connect to another computer, see Related Topics. With Windows Explorer and the command line, you can manage shared resources on your local computer only.
When permissions have been assigned both to the shared resource and at the file system level, the more restrictive permission always applies.
It is usually easier to assign permissions to groups and then add users to groups, rather than assigning identical permissions to individual users.
If you change permissions on special shared resources, such as ADMIN$, the default settings may be restored when the Server service is stopped and restarted or when the computer is restarted. Note that this does not apply to user-created shared resources whose share name ends in $. For more information about special shared resources, see Related Topics.
File sharing options may be limited if simple file sharing is enabled. For more information about simple file sharing, see article Q304040, "How to configure file sharing in Windows XP," in the Microsoft Knowledge Base.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.