What level of access to shared folders should I allow?

Published: April 26, 2010

Updated: March 30, 2011

Applies To: Windows Small Business Server 2011 Essentials, Windows Storage Server 2008 R2 Essentials

As a best practice, you should assign the most restrictive permissions available that still allow users to perform required tasks.

You have three access settings available for the shared folders on the server:

  • Full access

    Choose this setting if you want to allow the user account permission to create, change, and delete any files in the shared folder.

  • Read only

    Choose this setting if you want to allow the user account permission to only read the files in the shared folder. User accounts with read-only access cannot create, change, or delete any files in the shared folder.

  • No access

    Choose this setting if you do not want the user account to access any files in the shared folder.