HiCan anyone help me out. If you configure a share level permission of change and a ntfs permission of Modify. Which of the 2 is the most restrictive and why?I think it would be change but I am unable to back up this thinking with any resource so I could be completly wrong. I would be very grateful if you have a link to perhaps a technect article to help out.RegardsRobert

the most restrictive will be Modify, because it doesn't contain Delete Subfolders and Files right. Actually Change shouldn't contain this right too, however it contains.I have blogged about diffrences between Change and Modify at my blog:http://www.sysadmins.lv/PermaLink,guid,c4d6ef6e-8b78-480e-b37e-f101aa1af315.aspxpost in Russian, so you may need to use online translator to read this in your language.also here is another link: http://technet.microsoft.com/en-us/library/cc784499(WS.10).aspxhowever it doesn't explain granular differences. But is very useful for basic understanding. http://www.sysadmins.lv

Thanks,This has been useful. I have checked the technet article you have linked and have compared it with:http://technet.microsoft.com/en-us/library/cc783530(WS.10).aspxAnd I see what you mean about the ability to delete subfolders and files. It would be very useful if MS could provide a table with the differences in a granular fashion in the one place. I will look into translating your blogg out of interest.Thanks again.

I don't sure if this table exist. You may construct your own table using http://technet.microsoft.com/en-us/library/cc783530(WS.10).aspxhttp://www.sysadmins.lv

Hello NTFS or security permissions take precedence over share permission..so for any effective permission, use ntfsIsaac Oben MCITP:EA, MCSE

> Hello NTFS or security permissions take precedence over share permissionthis is not correct statement. When we are talking about share permissions and access to share, not always NTFSpermissions take precedence over share permissions. For example if share permissions are set to read, but NTFS to full control then locally effective permissions will be full control. But if user access to folder through network, then effective will be Read (because share permissions are more restrictive than NTFS permissions). http://www.sysadmins.lv