1 Module 6 Securing Network Resources with NTFS Permissions.

Slides:



Advertisements
Similar presentations
Managing User, Computer and Group Accounts
Advertisements

1 Module 3 Setting Up User Accounts. 2  Overview Introduction to User Accounts Planning New User Accounts Creating User Accounts Deleting and Renaming.
When you combine NTFS permissions and share permissions the most restrictive effective permission applies. For example, if you share a folder and assign.
11 CONFIGURING AND MANAGING SHARED FOLDER SECURITY Chapter 8.
 Overview User Accounts Groups User Rights Permissions.
1 Chapter Overview Understanding and Applying NTFS Permissions Assigning NTFS Permissions and Special Permissions Solving Permissions Problems.
1 Chapter Overview Understanding NTFS Permissions Assigning NTFS Permissions Assigning Special Permissions.
1 Module 4 Setting Up Group Accounts. 2  Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.
Chapter 9 Chapter 9: Managing Groups, Folders, Files, and Object Security.
Fundamentals of Soft Resource Sharing By Nanda Ganesan, Ph.D. © Nanda Ganesan.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 5: Managing File Access.
MIS Chapter 51 Chapter 5 – Managing File Access MIS 431 Created Spring 2006.
70-270, MCSE/MCSA Guide to Installing and Managing Microsoft Windows XP Professional and Windows Server 2003 Chapter Nine Managing File System Access.
11 SHARING FILE SYSTEM RESOURCES Chapter 9. Chapter 9: SHARING FILE SYSTEM RESOURCES2 CHAPTER OVERVIEW  Create and manage file system shares and work.
Lesson 4: Configuring File and Share Access
By Rashid Khan Lesson 8-Crowd Control: Controlling Access to Resources Using Groups.
5.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems.
1 Securing Network Resources Understanding NTFS Permissions Assigning NTFS Permissions Assigning Special Permissions Copying and Moving Files and Folders.
Group Accounts; Securing Resources with Permissions
1 Chapter Overview Creating User and Computer Objects Maintaining User Accounts Creating User Profiles.
1 Module 5 Securing Network Resources with Shared Folder Permissions.
11 SHARING FILE SYSTEM RESOURCES Chapter 9. Chapter 9: SHARING FILE SYSTEM RESOURCES2 CHAPTER OVERVIEW Create and manage file system shares and work with.
Access Control Lists and NTFS Permissions INFO333 – Lecture Mariusz Nowostawski Noria Foukia.
Web Server Administration Chapter 5 Managing a Server.
Corso referenti S.I.R.A. – Modulo 2 07 – Group Policy 20/11 – 27/11 – 05/12 11/12 – 13/12 (gruppo 1) 12/12 – 15/12 (gruppo 2) Cristiano Gentili, Massimiliano.
Sharing Resources Lesson 6. Objectives Manage NTFS and share permissions Determine effective permissions Configure Windows printing.
CN1176 Computer Support Kemtis Kunanuraksapong MSIS with Distinction MCT, MCTS, MCDST, MCP, A+
1 Group Account Administration Introduction to Groups Planning a Group Strategy Creating Groups Understanding Default Groups Groups for Administrators.
Chapter 7: WORKING WITH GROUPS
With Windows XP, you can share files and documents with other users on your computer and with other users on a network. There is a new user interface.
C HAPTER 6 NTFS PERMISSIONS & SECURITY SETTING. INTRODUCTION NTFS provides performance, security, reliability & advanced features that are not found in.
IOS110 Introduction to Operating Systems using Windows Session 8 1.
Module 4 Managing Access to Resources in Active Directory ® Domain Services.
Managing Groups, Folders, Files and Security Local Domain local Global Universal Objects Folders Permissions Inheritance Access Control List NTFS Permissions.
Chapter 9: SHARING FILE SYSTEM RESOURCES1 CHAPTER OVERVIEW  Create and manage file system shares and work with share permissions.  Use NTFS file system.
1 Chapter Overview Creating Drive and Folder Shares Using Distributed File System Installing Network Printers Administering Network Printers Managing Share.
1 Administering Shared Folders Understanding Shared Folders Planning Shared Folders Sharing Folders Combining Shared Folder Permissions and NTFS Permissions.
Module 3 Configuring File Access and Printers on Windows 7 Clients.
Permissions and User Rights
Chapter 8 Configuring and Managing Shared Folder Security.
Module 6: Deploying and Managing Software by Using Group Policy.
Page 1 NTFS and Share Permissions Lecture 6 Hassan Shuja 10/26/2004.
1 Chapter Overview Managing Object and Container Permissions Locating and Moving Active Directory Objects Delegating Control Troubleshooting Active Directory.
Module 5: Managing Access to Objects in Organizational Units.
Lecture 6 File, Folder and Share Security. Objectives Managing file and folder security.
CN1260 Client Operating System Kemtis Kunanuraksapong MSIS with Distinction MCT, MCITP, MCTS, MCDST, MCP, A+
1 Introduction to NTFS Permissions Assign NTFS permissions to specify Which users and groups can gain access to folders and files What they can do with.
Module 4: Managing Access to Resources. Overview Overview of Managing Access to Resources Managing Access to Shared Folders Managing Access to Files and.
Chapter 7 Server Management Policies –User accounts –Groups Rights and permissions Examples.
Managing Data by Using NTFS. Overview Introduction to NTFS Permissions How Windows 2000 Applies NTFS Permissions Using NTFS Permissions Using Special.
Securing Network Resources with NTFS Permissions.
Module 4: Managing Access to Resources. Overview Overview of Managing Access to Resources Managing Access to Shared Folders Managing Access to Files and.
Configuring and Managing Resource Access Lecture 5.
1 Chapter Overview Understanding Shared Folders Planning, Sharing, and Connecting to Shared Folders Combining Shared Folder Permissions and NTFS Permissions.
Windows Server 2003 檔案分享管理 林寶森
1 Introduction to Shared Folders Shared folders provide network users access to files. Users connect to the shared folder over the network. Users must.
Chapter 8 Server Management: Directories & Software Directory Structure Creating A Directory Directory Properties Setup Wizard Registry Installing/Uninstalling.
Sharing Resources Lesson 6. Objectives Manage NTFS and share permissions Determine effective permissions Configure Windows printing.
11/06/ أساسيات الأتصال و الشبكات Communication & Networks Fundamentals lab 5.
11 SUPPORTING WINDOWS XP FILE AND FOLDER ACCESS Chapter 5.
ITMT Windows 7 Configuration Chapter 6 – Sharing Resource ITMT 1371 – Windows 7 Configuration 1.
Introduction to NTFS Permissions
Module 4: Managing Access to Resources
Module 7: Managing Access to Objects in Organizational Units
Creating and Managing User Accounts
Managing Data by Using NTFS
Managing Data by Using NTFS
Chapter 9: Managing Groups, Folders, Files, and Object Security
Setting up home folders and roaming profiles
Presentation transcript:

1 Module 6 Securing Network Resources with NTFS Permissions

2  Overview Introduction to NTFS Permissions NTFS Permissions Securing Network Resources with Permissions Guidelines for Assigning NTFS Permissions Assigning NTFS Permissions Taking Ownership of Folders or Files Copying or Moving Folders or Files Identifying Permission Problems Best Practices

3  Introduction to NTFS Permissions NTFS Volume User1 R R User2 User3 R Suggestions C User1 Server Available Only on NTFS Volumes Secure Folders and Files Effective When a User Accesses the Resource: Locally Remotely

4  NTFS Permissions Read Write Execute Delete Take Ownership Change Permission Execute Delete Write ReadRead

5 How NTFS Permissions Are Applied Like Shared Folder Permissions A user’s effective permissions are the combination of both the user and group permissions. The No Access permission overrides all other permissions File Permissions Override the Permission for the Folder

6  Combining Shared Folder and NTFS Permissions NTFS Volume User2 User3 R R User1 R Suggestions Windows NT Workstation Windows NT Workstation Shared Folders C Public User1 FC FC User2 Server

7 Examples of Combining NTFS and Shared Folder Permissions 11 NTFS Volume Users UserA UserB UserC Domain Users Group Domain Users Group User1 FC FC FC User2 User3 FC 22 NTFS Volume Data Sales Data HR Pub Sales Group FC FC

8 Assign Administrators Full Control to Application and Data Folders  Guidelines for Assigning NTFS Permissions Remove the Default Permissions Educate Users to Assign NTFS Permissions to Their Files Assign Creator Owner Full Control to Data Folders User the Username Variable to Create Home Folders

9 Home Folders Create a Central Folder Named Users Share the Users Folder Assign Domain Users Full Control to Shared Folder Use the %Username% Variable to: Create the users home folders Assign only the user Full Control to their home folder Use the %Username% Variable to: Create the users home folders Assign only the user Full Control to their home folder

10  Assigning NTFS Permissions Requirements to Assign NTFS Permissions Owner Full Control Special Access: Change Permissions or Take Ownership Default NTFS Permissions The Everyone Group is Automatically assigned Full Control New files inherit the permissions of the folder where they are created.

11 Assigning NTFS File and Folder Permissions Directory Permissions Directory:D:\Folder Owner:Administrators Replace Permissions on Subdirectories Type of Access: Full Control Replace Permissions on ExistingFiles Name: Server OperatorsChange (RWXD) (RWXD) AdministratorsFull Control (All) (All) EveryoneList (RX) Not Specified SYSTEMFull Control (All) (All) CREATOR OWNERFull Control (All) (All) CancelAdd...RemoveHelpOK Add Users and Groups Names: List Names From: CancelOKHelp Type of Access: ShowUsers Add A Members... M Search... Add Names: NTSADOM2* Read AdministratorsMembers can fully adminster the comput Backup OperatorsMembers can bypass file security to bac Domain AdminsDesignated administrators fo the domain Domain GuestsAll domains guests EveryoneAll Users Account OperatorsMembers can administer domain user an GuestsUsers granted guest access to the comp

12 Customizing Permissions Special Access Permissions Are Identical for Files and Folders Special Directory Access Directory:D:\Data Read (R) Write (W) Name:Administrators OK Cancel Help Other Full Control (All) Execut (X) Delete (D) Change Permissions (P) Take Ownership (O)

13  Taking Ownership of Folders and Files OwnerUser OwnerAdministrator Takes Ownership Assigns Permission (O)

14  Copying or Moving Folders and Files Copy FILE1=New Permissions FILE1=RWX Move

15  Troubleshooting Permission Problems Incorrect Permissions A File with No Access Can Be Deleted Changed Permissions Do Not Take Effect Err or

16 Best Practices Use the %USERNAME% Variable to Create Users Home Folders Assign the Creator Owner Account Full Control to Data Folders Use Long Names Only If the Resource Is Accessed Locally Assign NTFS Permission Before Sharing the Resource Make Application Executable Files Read-Only for All Users

17 Review Introduction to NTFS Permissions NTFS Permissions Securing Network Resources with Permissions Guidelines for Assigning NTFS Permissions Assigning NTFS Permissions Taking Ownership of Folders or Files Copying or Moving Folders or Files Identifying Permission Problems Best Practices