Table of Contents
Advertisement
Nested Shares
administrator
Users
admin
guest
The Barricade allows a folder inside a share to be a share. This allows "nesting" of
shares to any depth. If using this feature, remember that:
In Windows' Network Neighborhood, all shares are listed on the same level -
the "nesting" is completely invisible.
When a user accesses a share, they will see only folders, never shares. Users
cannot tell whether or not a sub-folder is in fact a nested share.
Anyone with access to the outer share automatically has the same access rights
to any inner shares. So the most sensitive data must be kept in the outermost
share, not the innermost share. This is illustrated below.
Share (folder)
secret (/secret)
confidential (/secret/sensitive_data)
If have access, have same access rights to "published"
If have access, have same access rights to "confidential" and
"published"
ALWAYS has Read/Write access to ALL shares.
This group cannot be deleted.
The admin user cannot be removed from this group, but
other users may be added or deleted.
This user cannot be deleted.
The admin user is a member of the administrator group,
and therefore has Read/Write access to all shares.
By default, the admin user has no password, but a password
can be assigned. Assigning a password is recommended.
This user cannot be deleted.
The guest user is a member of the everyone group, and so
has the access rights of the everyone group.
The properties of the guest user can NOT be changed.
published (/secret/sensitive_data/publish_data)
Figure 7: Nested Shares
Page 21
Advertisement
Table of Contents
