Deafult Permissions for Folder Sharing?

Question

I have a set of folders that I do not wish to permanently share (on boot) but rather share occasionally.

Whenever I invoke Advanced Sharing... > Permissions, I always get Everyone with read-only by default:

Which forces me to go through quite a few additional clicks to set a different user with Read & Change permissions.

Is there a way to set/configure Windows to come up with my own preferred set of permissions? e.g. a specific user with Read & Change permissions, instead of Everyone have read-only?

Answer 1

According to How to Change Default Share Permissions:

The LanmanServer registry key not only stores the permissions for existing shares, but also a default security descriptor assigned to new shares upon creation. With the following information it is easy to modify the permissions newly created shares get by default, and recreate the comfortable situation we had before Windows Server 2003, for example.

Default share permissions are stored in the binary value:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\DefaultSecurity\SrvsvcDefaultShareInfo

That value is not present by default. In order to create it and populate it with useful content, follow these steps:

1. Create a template share named, for example, test.
2. Assign appropriate permissions to your template share “test” using the GUI.
3. Double-click the value storing the security descriptor of your “test” share: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\Shares\Security\test. Select everything (!) by pressing CTRL+SHIFT+END. Copy the selection with CTRL+C.
4. Create a new empty binary value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\DefaultSecurity\SrvsvcDefaultShareInfo.
5. Double-click SrvsvcDefaultShareInfo and press CTRL+V to paste the binary representation of the security descriptor you copied earlier.
6. Restart the “server” service (aka LanmanServer).
7. Create a new share. You will notice that it immediately has the same permissions you assigned to the “test” share.
8. You may now delete the “test” share.