12 - How to Share File and Folder with NTFS Permission in Windows Server 2022 (Video Tutorial in Khmer)

Hello my friend! Today I show you step-by-step how to Share File and Folder with NTFS Security Permission in Windows Server 2022! Creating shared network folder allow users across your company network access department files easily, while NTFS security permissions protect sensitive company data so only authorized users can read, edit, or delete files! Very easy to follow with video tutorial in Khmer! Let's get started!

Step 1: Create Data Folder on Server Disk

First, create dedicated directory on server hard drive (avoid storing company shares directly on system C:\ drive if possible!):

1. Open File Explorer (Win + E) and navigate to data partition (example: D:\ drive).
2. Right-click empty area > New > Folder.
3. Name your folder (example: SharedData or CompanyFiles).

💡 Tip: Always create shared folder on secondary partition like D:\ or E:\ drive! If C:\ system drive run out of disk space, Windows Server system can crash or fail to boot!

Step 2: Configure Share Permissions (SMB Network Share)

Now enable network sharing on folder so client PCs can locate folder across network:

1. Right-click SharedData folder > select Properties.
2. Go to Sharing tab > click Advanced Sharing... button.
3. Check box Share this folder.
4. Set Share name (example: SharedData).
5. Click Permissions button:
   • Select Everyone > click Remove (Best Practice!).
   • Click Add... > type Active Directory domain group name (example: Domain Users or IT-Users).
   • Give Change and Read permissions (or check Full Control for Share permission layer).
6. Click OK > click Apply.

💡 Tip (Best Practice): Set Share Permissions to Everyone = Full Control or Domain Users = Full Control, then rely on NTFS Security Permissions to fine-tune exact access rights! This avoid double headache troubleshooting permission conflicts!

Step 3: Configure NTFS Security Permissions (File Level Security)

Now set NTFS Security permissions to grant precise control (Full Control, Modify, Read & Execute):

1. Inside folder properties window, switch to Security tab.
2. Click Advanced button > click Disable inheritance > select Convert inherited permissions into explicit permissions on this object.
3. Remove generic Users group if needed.
4. Click Add button to assign department group access:
   • Click Select a principal > type domain group name (example: REAN\IT-Department).
   • Set Basic permissions:
     • IT-Department → Check Modify, Read & execute, List folder contents, Read, Write.
     • HR-Department → Check Read & execute, List folder contents, Read (Read Only!).
     • Domain Admins → Check Full Control.
5. Click OK > click Apply > click OK.

⚠️ Warning (Rule of Effective Permission): Final effective permission is combination of Share Permission + NTFS Permission — Windows will ALWAYS apply the MOST RESTRICTIVE setting! Example: If Share = Read Only, but NTFS = Full Control, user can ONLY Read!

Step 4: Hide Shared Folder with Hidden Share ($) (Optional Tip)

If you want shared folder to stay hidden from network browsing:

1. In Share Name box, add $ dollar sign symbol at end of name (example: SharedData$).
2. Now folder will NOT show up when users browse \\Server01 in File Explorer! Users must type full exact path \\Server01\SharedData$ to access!

💡 Tip: Hidden shares ending with $ are great for secret administrative shares, backup targets, or private department folders!

Step 5: Test Network Access from Client Computer

Test accessing shared folder from client PC (Windows 10 / Windows 11) joined to domain:

1. On client PC logged in with domain account (example: sok.dara), press Win + R to open Run dialog box.
2. Type network path to server UNC format:

\\192.168.1.10\SharedData

or

\\SRV-DC01\SharedData

3. Press Enter!
4. Try creating new text file or folder inside SharedData:
   • If user has Modify permission → file created successfully!
   • If user has Read permission → Windows display Access is Denied when trying to save changes!

💡 Tip: Always assign permissions to Active Directory Security Groups (like GRP_IT_STAFF), NEVER assign directly to individual user accounts! When new staff join company, simply add user to group!

Watch Video Tutorial (Khmer)

Watch full step-by-step video tutorial below to see how to share folders and configure NTFS permissions in Khmer:

---

Hope this tutorial help you share files and setup NTFS permissions easily! Practice setting up shared folder on your server today. Happy learning my friends! Sharing is caring!