Windows Server Share, File Folder Permissions.ppt

Windows Server:Share, File Folder Permissions David Turton Conestoga College Institute of Technology Advanced Learning www.conestogac.on.ca/~dturton Doon 1D17, x3610 Shares Users can’t see drives and printers on servers Unless they’ve been shared assigned a share name Sub-sub folders can be given simple share names (to hide directory structure) Share Permissions By default, the Everyone group has read access to a new share Win 2000 earlier: Everyone group had Full Control On FAT32 drives, these are the only permissions And should be modified to suit the need Warning: Don’t remove the Everyone group before adding another group or user Don’t ever Deny the everyone group … you are a member of the everyone group Suggestion: Replace Everyone group with Domain Users give it Full Control These are users that have been validated by Active Directory Read Can list folder contents, Can read execute files Change Read permissions, plus Delete/create files folders Change file contents Full Control All above plus: Take ownership Note: these apply to share contents, not the share itself Share PermissionsEveryone group defaults to only Read rights to a share … To let users do more, give Domain Users group Full Control… well refine that later, with NTFS permissions NTFS Permissions- folders files NTFS provides more control of user access 90 permission instead of 3 NTFS permissions augment share permissions Most restrictive of share and NTFS rights wins Sub-folders: Folders inherit rights from the share Plus rights granted to intervening folders Plus rights explicitly granted to this folder Rights are cumulative unless you explicitly block inheritance share share NTFS NTFS If you restrict the share permissions, NTFS cant provide anything more If you open the share permissions, you can do what you like with NTFS Marketing Administrators Cululative User Rights Users obtain rights from: Their user object Groups they belong to The computer they’re on Rights are ex