Add Access Control Entry

	Concepts		Procedures		More Information

About access control entires

The Add Access Control Entry page enables you to add access control entries.

About share-level ACL

A share-level ACL consists of a list of access control entries (ACEs). Each ACE contains a user or group name and a set of permissions that determine user or group access to the share. A share-level ACL further restricts access to files in the share; it never grants more access than the file-level ACLs.

By default, when you create a share, the share-level ACL gives full control to the special group named Everyone. All users in the domain and all trusted domains have full access to the share; their access to the share's contents is restricted only by file- and directory-level ACLs. You can change the share-level ACL if you want to use a more restrictive set of permissions for the share.

Share-level ACL permission types

You can specify Windows NT permissions or UNIX-style permissions for a share-level ACL, as described in the following table.