Question

Shares Baseline Security Information

Security management, Auditing, Security products, Security, Platform Security, vulnerability management, patching, configuration, PEN testing, Vulnerability Assessment & Audit

Hello,

I use the Microsoft Baseline Security Analyser 2.0 to retrive information about shares in some local servers.

I can not understand the diference between the information give in the report, about authorizations in the column Share ACL and Directory ACL.

If some one can help me,

Thank you
PPG

Share ACL refers to who has permission to connect to a given share over the network - and is common to ALL Windows (and even DOS) file servers, as well as workstations with FAT16 and FAT32 file systems.

Directory ACL applies to the permissions specified in the NTFS file system, which does NOT exist on systems without NTFS.

It is a commonly observed problem for example to see someone with the ability to connect to a given shared folder, who is unable to browse the folder once connected. The Share ACL says that they can get there, but the Directory ACL says that they can't.

Clear enough?

Bob