slide1 l.
Skip this Video
Loading SlideShow in 5 Seconds..
IOS110 Introduction to Operating Systems using Windows Session 8 PowerPoint Presentation
Download Presentation
IOS110 Introduction to Operating Systems using Windows Session 8

Loading in 2 Seconds...

play fullscreen
1 / 18

IOS110 Introduction to Operating Systems using Windows Session 8 - PowerPoint PPT Presentation

  • Uploaded on

IOS110 Introduction to Operating Systems using Windows Session 8. 1. Objectives: Shared Folders NTFS. Shared Folders. Shared Folders. Shared Folders Permissions apply to all entries in the folder (as the name implies) No affect on local users

I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
Download Presentation

IOS110 Introduction to Operating Systems using Windows Session 8

An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.

- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript


Introduction to Operating Systems using Windows

Session 8




  • Shared Folders
  • NTFS

Shared Folders

  • Shared Folders
  • Permissions apply to all entries in the folder (as the name implies)
  • No affect on local users
  • Files/Folders on FAT/FAT2 partitions can only be secured by Shared Folder permissions only – NTFS permissions cannot be applied
  • A new shared folder defaults to the group Everyone, with Full Control permissions
  • The only built-in groups that can share a folder are:
      • Administrators
      • Power Users
  • Permissions that can be granted on a Shared Folder are:
      • Read (display folder names, files names, file data and attributes. Run executables. Navigate to folders within the Shared Folder
      • Change – All Read Permissions and: Create folders, add files to folders, change data in files, append data in files
      • Full Control – All Read and Change permissions and: change file permissions, take ownership of files.
      • Deny – Used to override permissions already in place. For example, a new employee may have access to a set of folders as they are members of a group. However, until their probation is over, they may be denied accessing some of the folders.
  • A folder can be shared more than once with different names – this is a means to solve the 8.3 filename restriction on older operating systems
  • Permissions can be customized



Shared Folders

  • Points to Ponder
  • Denying permission overrides all other shared permissions that may be applied to a folder
  • Multiple permissions accumulate
  • Copying of moving a folder alters the shared permissions associated with that folder
  • When you share a folder that is located on an NTFS volume, you will still need to consider the NTFS permissions that apply to that folder
  • When a shared folder and NTFS permissions combine, the most restrictive permissions apply
  • If a folder resides on an NTFS volume. you will need at least the NTFS Read permission to be able to share that folder at all



Shared Folders – Sharing Strategies

  • Applications
  • Sharing an application folder on a server is indented to make it available to clients on the network
  • Install and administer one copy, instead of many copies across the client population
  • Create a central shared folder to hold all other application folders – permissions can be administered from the top-most application folder
  • Administrators can be granted Full Control (through Administrative Shared Folders)
  • After shared has been created – remove Everyone group from the share, and add Users group to the share with Read Permission
  • If necessary, assign Change Permission to groups such as Power Users – they may need to upgrade software or troubleshoot applications
  • If necessary, you can create separate shared folders located outside the folder hierarchy fro applications that need customized permissions
  • When creating permissions, start with the most restrictive set.



Shared Folders – Sharing Strategies

  • Data
  • Keep data folders separate from application folders
  • Configure permissions to allow read and write privileges



Shared Folders

  • Connecting to Shared Resources
  • My Network Places
  • Windows Explorer
  • Run Command
  • Mapping a drive



Administrative Shared Folders

  • Background
  • When a hierarchy of folders are being shared, they are shared from the root (of the hierarchy) downwards.
  • Administrative Shares are created at the root of the partition – thus allowing Administrators to manage the PC from the root on down
  • By default, Administrative Shares are assigned only to the Administrative Group with Full Control
  • Drives are given the share name of the letter followed by a $:
      • C$, D$, E$, etc. including the CD-ROM drive
  • The \WINDOWS folder is given the share name of Admin$
  • When the first shared printer is installed, the Administrative Share $Print is created, and points to the directory where printer driver files are stored
      • Power Users are also given Full Control



Shared Folders

  • Shared Documents Folder
  • Created when 2 or more local accounts exist
  • Automatically shared
  • Used to locally share documents between the local user accounts
  • When connected to a network, allows the sharing of documents between computers



Shared Folders

  • ForceGuest
  • For WinXP PCs not connected to a domain
  • Forces all users logging onto the computer across the network to user the Guest account
  • No need to have an account on every PC that contains resources you need
  • Even though you provide a user ID and password, you will only receive Guest-level access – Defaults to a more secure model
  • Is turned on when WinXP uses the Simple Sharing user interface




  • Folder Permissions
  • Read
  • Write
  • List Folder Contents
  • Read and Execute
  • Modify
  • Full Control
  • File Permissions
  • Read
  • Write
  • Read and Execute
  • Modify
  • Full Control
  • Special Access Permissions
  • 28 variations (14 folder, 14 file)
  • More granular than the above permissions, and are used to construct the standard permissions:
      • READ = List Folder/Read Data + Read Attributes + Read Extended Attributes + Read Permissions




  • Access Control Lists (ACLs)
  • Stored with every file and folder on an NTFS volume
  • ACL is a list of users and groups that have been granted access, as well as the type of access
  • Access Control Entry (ACE) is a detail record in the ACL
  • Group Membership and NTFS Permissions
  • Your permissions are the cumulative permissions of all your group memberships
  • Is the least restrictive set of permissions
  • Exception is the Denied permission
  • File permissions override folder permissions – again the exception is if you are Denied
  • How File and Folder Permissions Work Together
  • If there is a conflict between file permissions and folder permissions, the file permissions will apply




  • Applying and Modifying NTFS Permissions
  • WinNT/2K – default was to give Everyone group Full Control on the formatted volume
  • WinXP – NTFS permissions are applied when you first create a folder:
      • Administrators
      • users that own files and folders (Creator Owner)
      • System group
    • all get Full Control
      • Users group
    • get Read and Execute
  • To view and modify NTFS permissions you must disable Simple File Sharing
  • Inheritance of NTFS Permission
  • Permissions are inherited from parent folder to all is files and to subfolders
  • Change Permission and Take Ownership Permission
  • Change Permission:
      • By default Administrators and file owners can change a file's permissions
      • The Change permission can be assigned to another user to be able to manage the permissions on files
  • Take ownership
      • Can be granted to a user that is taking over the responsibilities of another user
      • Administrator or original user (Full Control) can grant Take Ownership




  • NTFS Permissions and Copying
  • Same rules as when Copying Compressed Files
  • NTFS Permissions and Moving
  • Same rules as when Moving Compressed Files
  • Modify Permission is required at the source folder so that the file can be deleted
  • Write permission is required at the destination folder to create the file




  • Shared Folder / NTFS permissions
  • To what objects can you apply these permissions?
  • Where are these permissions effective
  • How are multiple permissions accumulated?
  • When both folder and file permissions are present, which takes precedence?
  • Shared Folder and NTFS permissions Combined
  • The most restrictive permissions apply:
  • (NTFS) + (Shared) = Effective Permission
  • (Full Control) + (Read) = Read
  • (Read + Write ) + (Full Control) = Read + Write
  • (Read) + (Change) = Read
  • Windows XP provides a tab to view the effective permissions on a file/folder




An Example


Users: NTFS:Read & Execute

Accountants: NTFS:Write


local Users group

local Accountant group

Bob's effective Permissions = Modify


Users: NTFS:Read & Execute

Accountants: NTFS:Write

Everyone: SF:Read

Users: SF:Read

Bob's effective Permissions = ?

Simple Fix?