<< Click to Display Table of Contents >> Shares Data Sources |
Where the data on the Shares page of the Computer window comes from. See Computer Window Data Sources for how to read the Source column, and for the other pages of the Computer window.
Collected by the Shares scanner.
From WMI Win32_Share. Administrative shares such as C$ and ADMIN$ are included.
Field |
Source |
Derivation / Notes |
|---|---|---|
Name |
WMI |
Win32_Share.Name. |
Path |
WMI |
Win32_Share.Path - the local folder the share points at. |
Description |
WMI |
Win32_Share.Description. |
The share permissions of the share selected above, from WMI Win32_LogicalShareSecuritySetting and Win32_LogicalShareAccess.
NOTE: These are share permissions only. NTFS permissions on the underlying folder are not collected, so effective access can be narrower than what is shown here.
Field |
Source |
Derivation / Notes |
|---|---|---|
User/Group |
WMI |
The trustee's account name, resolved from the SID on the access entry. |
Domain |
WMI |
The trustee's domain, resolved from the same SID. |
Read |
Calculated |
Decoded from the entry's access mask. |
Change |
Calculated |
Decoded from the entry's access mask. |
Full |
Calculated |
Decoded from the entry's access mask. |
NOTE: Read, Change, and Full are matched against the three standard share permission sets, so a share given a custom access mask can leave all three unchecked. Deny entries are collected too and carry the same three flags, so a row showing Full may be a deny of full control rather than a grant - check the share on the target before acting on it.
© 2026 PDQ.com Corporation. All rights reserved.
PDQ.com is a trademark of PDQ.com Corporation. All other product and company names are the property of their respective owners.
Help Version: 20.1.28.0