By Rashid Khan Lesson 8-Crowd Control: Controlling Access to Resources Using Groups.

Slides:

Advertisements

Similar presentations

By Rashid Khan Lesson 5-Directory Assistance: Administration Using Active Directory Users and Computers.

Advertisements

When you combine NTFS permissions and share permissions the most restrictive effective permission applies. For example, if you share a folder and assign.

 Overview User Accounts Groups User Rights Permissions.

1 Chapter Overview Understanding and Applying NTFS Permissions Assigning NTFS Permissions and Special Permissions Solving Permissions Problems.

1 Chapter Overview Understanding NTFS Permissions Assigning NTFS Permissions Assigning Special Permissions.

Chapter 9 Chapter 9: Managing Groups, Folders, Files, and Object Security.

1 File systems security: Shared folders & NTFS permissions, EFS (Week 6, Monday 2/12/2007) © Abdou Illia, Spring 2007.

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 5: Managing File Access.

11 WORKING WITH GROUPS Chapter 7. Chapter 7: WORKING WITH GROUPS2 CHAPTER OVERVIEW  Understand the functions of groups and how to use them.  Understand.

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 5: Managing File Access.

MIS Chapter 51 Chapter 5 – Managing File Access MIS 431 Created Spring 2006.

Hands-On Microsoft Windows Server 2003 Administration Chapter 5 Administering File Resources.

Lesson 19 – ADMINISTERING WINDOWS 2000 SERVER : THE BASICS.

Chapter 6: Configuring Security. Group Policy and LGPO Setting Options Software Installation not available with LGPOs Remote Installation Services Scripts.

Hands-On Microsoft Windows Server 2003 Administration Chapter 3 Administering Active Directory.

11 SHARING FILE SYSTEM RESOURCES Chapter 9. Chapter 9: SHARING FILE SYSTEM RESOURCES2 CHAPTER OVERVIEW  Create and manage file system shares and work.

Lesson 4: Configuring File and Share Access

5.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems.

1 Securing Network Resources Understanding NTFS Permissions Assigning NTFS Permissions Assigning Special Permissions Copying and Moving Files and Folders.

Group Accounts; Securing Resources with Permissions

1 Chapter Overview Creating User and Computer Objects Maintaining User Accounts Creating User Profiles.

Chapter 7 WORKING WITH GROUPS.

11 SHARING FILE SYSTEM RESOURCES Chapter 9. Chapter 9: SHARING FILE SYSTEM RESOURCES2 CHAPTER OVERVIEW Create and manage file system shares and work with.

Guide to Operating System Security Chapter 5 File, Directory, and Shared Resource Security.

Chapter 5 File and Printer Services

Chapter-4 Windows 2000 Professional Win2K Professional provides a very usable interface and was designed for use in the desktop PC. Microsoft server system.

Sharing Resources Lesson 6. Objectives Manage NTFS and share permissions Determine effective permissions Configure Windows printing.

CN1176 Computer Support Kemtis Kunanuraksapong MSIS with Distinction MCT, MCTS, MCDST, MCP, A+

1 Group Account Administration Introduction to Groups Planning a Group Strategy Creating Groups Understanding Default Groups Groups for Administrators.

Week 9 Objectives Securing Files and Folders Protecting Shared Files and Folders by Using Shadow Copies Configuring Network Printing.

Chapter 7: WORKING WITH GROUPS

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 5: Managing File Access.

IOS110 Introduction to Operating Systems using Windows Session 8 1.

Module 4 Managing Access to Resources in Active Directory ® Domain Services.

Managing Groups, Folders, Files and Security Local Domain local Global Universal Objects Folders Permissions Inheritance Access Control List NTFS Permissions.

Active Directory Administration Lesson 5. Skills Matrix Technology SkillObjective DomainObjective # Creating Users, Computers, and Groups Automate creation.

Chapter 9: SHARING FILE SYSTEM RESOURCES1 CHAPTER OVERVIEW  Create and manage file system shares and work with share permissions.  Use NTFS file system.

1 Administering Shared Folders Understanding Shared Folders Planning Shared Folders Sharing Folders Combining Shared Folder Permissions and NTFS Permissions.

Module 3 Configuring File Access and Printers on Windows ® 7 Clients.

Module 3 Configuring File Access and Printers on Windows 7 Clients.

Chapter 10: Rights, User, and Group Administration.

Module 3: Configuring File Access and Printers on Windows 7 Clients

Chapter 8 Configuring and Managing Shared Folder Security.

MCDST : Supporting Users and Troubleshooting a Microsoft Windows XP Operating System Chapter 11: Managing Access to File System Resources.

MCSE Guide to Microsoft Windows Vista Professional Chapter 5 Managing File Systems.

Page 1 NTFS and Share Permissions Lecture 6 Hassan Shuja 10/26/2004.

1 Chapter Overview Managing Object and Container Permissions Locating and Moving Active Directory Objects Delegating Control Troubleshooting Active Directory.

Guide to MCSE , Second Edition, Enhanced 1 Managing NTFS Permissions NTFS Only file system supported by Windows XP that offers file- level security.

Lecture 6 File, Folder and Share Security. Objectives Managing file and folder security.

NetTech Solutions Security and Security Permissions Lesson Nine.

1 Introduction to NTFS Permissions Assign NTFS permissions to specify Which users and groups can gain access to folders and files What they can do with.

Module 4: Managing Access to Resources. Overview Overview of Managing Access to Resources Managing Access to Shared Folders Managing Access to Files and.

1 Chapter Overview Using Group Objects Understanding Default Groups Creating Group Objects Managing Administrative Access.

Module 4: Managing Access to Resources. Overview Overview of Managing Access to Resources Managing Access to Shared Folders Managing Access to Files and.

1 Chapter Overview Understanding Shared Folders Planning, Sharing, and Connecting to Shared Folders Combining Shared Folder Permissions and NTFS Permissions.

1 Introduction to Shared Folders Shared folders provide network users access to files. Users connect to the shared folder over the network. Users must.

Sharing Resources Lesson 6. Objectives Manage NTFS and share permissions Determine effective permissions Configure Windows printing.

11/06/ أساسيات الأتصال و الشبكات Communication & Networks Fundamentals lab 5.

6/19/2016 أساسيات الأتصال و الشبكات Communication & Networks Fundamentals lab 4.

11 SUPPORTING WINDOWS XP FILE AND FOLDER ACCESS Chapter 5.

ITMT Windows 7 Configuration Chapter 6 – Sharing Resource ITMT 1371 – Windows 7 Configuration 1.

Introducing, Installing, and Upgrading Windows 7

Introduction to NTFS Permissions

Module 4: Managing Access to Resources

Active Directory Administration

Chapter 9: Managing Groups, Folders, Files, and Object Security

Introducing NTFS Reliability Security Long file names Efficiency

Creating and Managing Folders

Network Locations in Windows 7

Presentation transcript:

by Rashid Khan Lesson 8-Crowd Control: Controlling Access to Resources Using Groups

by Rashid Khan Overview  Windows Server 2003 group accounts.  Manage folder, file, and printer access.  Troubleshoot share and access control problems.

by Rashid Khan Windows Server 2003 Group Accounts  Group accounts are used to assign permissions to groups of users.  Windows Server 2003 offers domain local groups, global groups, and universal groups.

by Rashid Khan Windows Server 2003 Group Accounts  Group scope and membership rules.  Best practices for using group accounts.

by Rashid Khan Group Scope and Membership Rules The scope of a group determines: The group’s ability to access resources within the logical structure of the network. The accounts that can join a group as a member, and whether or not each group can join other groups.

by Rashid Khan Group Scope and Membership Rules Domain Local Groups Scope and Membership Rules

by Rashid Khan Group Scope and Membership Rules Global Groups Scope and Membership Rules

by Rashid Khan Group Scope and Membership Rules Universal Groups Scope and Membership Rules

by Rashid Khan Best Practices for Using Group Accounts  Group accounts are created in the Active Directory.  Most group management tasks are performed using the group’s properties dialog box.

by Rashid Khan Best Practices for Using Group Accounts Group’s Properties dialog box

by Rashid Khan Best Practices for Using Group Accounts  Domain local groups can be used to represent the resources being shared on the network.  Global groups should be used to hold user and/or computer accounts that are similar in function and/or their need to access resources.  Universal groups are used to provide users in one domain access to resources in any other domain in the forest.

by Rashid Khan Manage Folder, File, and Printer Access  Share permissions  NTFS permissions  Printer permissions

by Rashid Khan Share Permissions Permissions dialog box for a shared folder

by Rashid Khan Share Permissions The Read permission enables users to: Run programs. Open and view data files. View the names of all files and folders within the shared folder.

by Rashid Khan Share Permissions The Change permission enables users to: Change data files. Add and remove files and subfolders within the shared folder.

by Rashid Khan Share Permissions Full Control permission is used to: Change permissions on the shared folder. Add new users and set their access level.

by Rashid Khan NTFS Permissions NTFS permissions: Determine what users can do with the files and folders stored on an NTFS-formatted hard drive. Apply whether the files or folders are accessed over the network or locally.

by Rashid Khan NTFS Permissions  Standard permissions  Special permissions  Inheritance  Ownership  Effective permissions

by Rashid Khan Standard Permissions NTFS permissions for a folder

by Rashid Khan Standard Permissions NTFS Standard Permissions As They Apply to Folders and Files

by Rashid Khan Special Permissions Advanced Security Settings dialog box for a folder

by Rashid Khan Special Permissions Permission Entry dialog box for a folder

by Rashid Khan Inheritance  By default, all permissions applied to the parent folder are inherited by the files and subfolders it contains.  Inheritance can be modified through the Advanced Security Settings dialog box.

by Rashid Khan Ownership  The Owner tab is used to change the owner of a file or folder.  By default, the ownership of a file or folder belongs to the account that created it.

by Rashid Khan Effective Permissions  The Effective Permissions tab provides a quick analysis of the effective permission for a user or group account.  Effective permission is the overall effect of all combined permissions inherited from group membership.

by Rashid Khan Printer Permissions  Standard printer permissions.  Special printer permissions.

by Rashid Khan Standard Printer Permissions The standard printer permissions are: Print Manage Printers Manage Documents

by Rashid Khan Standard Printer Permissions Printer permissions are found on the Security tab of the printer’s properties dialog box.

by Rashid Khan Special Printer Permissions Special printer permissions

by Rashid Khan Troubleshoot Share and Access Control Problems  Check share and NTFS partitions.  Use the Effective Permissions utility.

by Rashid Khan Troubleshoot Share and Access Control Problems  Check group membership.  Check special permissions.

by Rashid Khan Summary  Windows Server 2003 offers domain local groups, global groups, and universal groups.  Share and NTFS permissions must be properly configured for file and folder resources to be usable.  Share permissions include Read, Change, and Full Control.

by Rashid Khan Summary  NTFS standard permissions include Write, Read, List Folder Contents, Read & Execute, Modify, and Full Control.  The standard printer permissions are Print, Manage Printers, and Manage Documents.  Aspects such as share and NTFS permissions, group membership, and special permissions must be checked to troubleshoot share and access control problems.