To share the root of a drive you have to set the folder permissions for the
whole drive. This makes it harder to then later limit access to particular
folders. You have to disable inheritance on the folder you want to limit
access to. Most people don't know there is such a thing as inheritance let
alone how to disable it for a given folder. I did say "possible" security
issue. For a small home network it's probably not that much of an issue. In
an office it could be. Lets say you have a computer with a shared D: drive.
A new employee is assigned to this computer and installs a new payroll
program with the data in a folder on drive D:. All the employees now have
access to the payroll data. If the previously shared data had been shared
from a folder instead of the whole drive it's far less likely the payroll
data would have been shared. It's also a possible way to gain access to
local computer accounts or spread malware by dropping an autorun file into
the root of the drive. When someone at the local computer accesses the drive
the file will autorun, possibly loading malware.
--
Kerry Brown
MS-MVP - Windows Desktop Experience: Systems Administration
http://www.vistahelp.ca/phpBB2/
http://vistahelpca.blogspot.com/
"Synapse Syndrome" <> wrote in message
news:...
> Synapse Syndrome <> wrote:
>>>
>>> It's a possible security issue to share a whole drive.
>>
>> I've never been able to figure out how that would be a security risk.
>> It's it's not the root of C:, what is the problem with that?
>>
>> Cheers
>
>
>
> Oh, and I am not asking about administrative shares. I mean, how is
> making a regular share of the whole drive a security risk..
>
> ss.
>