How not to permission your folders
One of the major projects I’ve been working on is migrating all of our shares off of the old hardware to new NAS appliances. As part of this, we’ve been reviewing and correcting folder permissions, to sort of help clean up as we go. Here’s an example of some of the totally awful permissioning I’ve been finding (identifying names have been obscured to protect the stupid):
“\\[server]\[share]\[dept]\2003 Secure Area STAY OUT\2003 Budget Info” /S “[domain]\Public”:RWXD /S “Everyone”:RX