On MS Windows NT4/200x/XP system, ACLs on the share itself are set using native
tools, usually from File Manager. For example, in Windows 200x, right-click on the shared folder,
then select , then click on Permissions. The default
Windows NT4/200x permission allows "Everyone" full control on the share.
MS Windows 200x and later versions come with a tool called the Computer Management
snap-in for the MMC. This tool is located by clicking on .
After launching the MMC with the Computer Management snap-in, click the menu item Connect to another computer. If you are not logged onto a domain you will be prompted
to enter a domain login user identifier and a password. This will authenticate you to the domain.
If you are already logged in with administrative privilege, this step is not offered.
If the Samba server is not shown in the Select Computer box, type in the name of the target
Samba server in the field Name:. Now click the on next to
System Tools, then on the next to
Shared Folders in the left panel.
In the right panel, double-click on the share on which you wish to set access control permissions.
Then click the tab Share Permissions. It is now possible to add access control entities
to the shared folder. Remember to set what type of access (full control, change, read) you
wish to assign for each entry.