File security more restrictive than share security (Windows)

Module: Network Integrity

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

This check reports a problem if file permissions are weaker than share permissions. Enable keys to specify the scope of the check. If neither key is enabled, the check examines only folders in the top-level of the shared folder. If only the Check Files key is enabled, the check examines both files and folders in the top-level of the shared folder. If only the Traverse Directory Tree key is enabled, the check examines all folders on the share. If both keys are enabled, the check examines all files and folders on the share.

The following table lists the error message for the check.

Table: Error message for File security more restrictive than share security

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESM_SHARE_FILE_PERMISSIONS

Category: Change Notification

  • Windows 2000 (106342)

  • Windows 2003 (206342)

  • Windows 2008 (249342)

  • Windows Vista (229342)

  • Windows XP (201342)

Title: Share permissions are more restrictive than file permissions

Description:The share permissions that are reported in the Information field are more restrictive than the file permissions on the shared file or folder. Users may be able to access the file locally or through another share with less restrictive security.

Severity: yellow-1

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [File/folder: %s; account: %s; share permissions: %s; file/folder permissions: %s]