Shares and permissions

Folders and users

The Daten, Tools and Backup folders and the local users User1, User2 and User3 were created on Server3.

Data share

The C:\Freigaben\Daten folder was shared as Daten. NTFS permissions were set as follows:

• User1: Read
• User2: Modify
• Administratoren: Full control
• SYSTEM: Full control

icacls "C:\Freigaben\Daten"

Access test

Access was tested from W11 with both user accounts. User1 could read content but could not create a file. User2 could create a new file.

net use Z: \\169.254.85.124\Daten /user:WIN-1PVVGTKTUB1\User1 *
Get-ChildItem Z:\
New-Item "Z:\user1-test.txt" -ItemType File

net use Z: \\169.254.85.124\Daten /user:WIN-1PVVGTKTUB1\User2 *
New-Item "Z:\user2-test.txt" -ItemType File
Get-ChildItem Z:\

Hidden share

The C:\Freigaben\Tools folder was configured as the hidden share Tools$. User3 received Modify permissions and could create a test file.

net use T: \\169.254.85.124\Tools$ /user:WIN-1PVVGTKTUB1\User3 *
New-Item "T:\user3-test.txt" -ItemType File
Get-ChildItem T:\