confused about setting NTFS permissions

Giganews Newsgroups
Subject: confused about setting NTFS permissions
Posted by:  Gilbert (Gilbe…@discussions.microsoft.com)
Date: Fri, 3 Mar 2006

I am familiar with setting up Share and NTFS permissions and how they
interact but there's 1 little box that has me confused.  If you right click
on a folder and go to Security Tab, then go to Advanced and then go to Edit.
There's a drop down box that says Apply Onto: This folder, subfolders, files.
You can choose what you want to apply the ACL to.  That makes perfect sense.

Then if you look at the bottom left, there's a box that says "apply these
permissions to objects and/or containers within this container only".  This
is the confusing part.

If I'm already choosing what to apply the ACL to at the top from the Apply
Onto box, then why would I need another box that says the same thing???

I went to Help and Support and this is what Microsoft says:
"To configure security so that the subfolders and files will not inherit
these permissions, clear the Apply these permissions to objects and/or
containers within this container only check box."

That's even more confusing because it seems to me that if I clear that box,
the settings will apply to all the subfolders/files, not the other way
around.

Can somebody please try to explain this in clear & simple terms?  I haven't
found much information on Google or Microsoft's technet, msdn, etc.  If you
could give me some examples, that would be great.

Replies