1. 5.1 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Goals  Understand File Allocation Table (FAT)  Understand NTFS  Compress and encrypt data on an NTFS Volume  Assign shared folder permissions  Set NTFS permissions  Set special access permissions  Troubleshoot permissions  Understand Distributed File System  Manage a Dfs Root

2. 5.2 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems  An older file system that can be read and accessed by most operating systems such as DOS, Windows 3.x, Windows 9.x, Windows NT, Windows 2000, Windows XP, and Windows Server 2003  FAT allocates storage space to files by setting up allocation units on a hard disk  An allocation unit, also known as a cluster, is the smallest unit for allocating storage space on a partition or volume  Sectors are the basic units of the physical drive and are the smallest units that can be used to transfer data to and from the disk (Skill 1) Introducing File Allocation Table (FAT)

3. 5.3 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-1 FAT file system (Skill 1)

4. 5.4 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems  Two primary versions  FAT16 file system  Supports partitions of up to 4 GB in size  Only Windows NT, Windows 2000, Windows XP, and Windows Server 2003 support FAT16 partitions larger than 2 GB  Is efficient on small-sized partitions of up to 256 MB  Supports dual booting by all Microsoft operating systems  Provides only folder-level security  FAT32  Similar to FAT16  It supports large-sized partitions of up to 2 TB (2047 GB) Introducing File Allocation Table (FAT) (2) (Skill 1)

5. 5.5 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-2 The FAT file system (Skill 1)

6. 5.6 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Reliability  NTFS is a recoverable file system  Volumes can be created that do not result in data loss in the event of a server crash or power failure Security  You can secure data by setting up permissions to control user access to files and folders Long file names  NTFS natively allows file names to be up to 256 characters in length Efficiency  NTFS is required in order to use certain features, such as Active Directory, which stores and manages network resources efficiently Faster access  NTFS minimizes the number of disk accesses required to find a file, which increases access speed Introducing NTFS (Skill 2)

7. 5.7 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Data compression  Built-in feature that increases available storage on a hard disk  In NTFS volumes, you can compress only specific files and folders or the entire volume  When you add a new file or folder to a compressed folder, it is compressed automatically  You cannot compress an encrypted file Data encryption  A security technique that attempts to ensure the confidentiality of a document by scrambling it using an encryption key  You cannot encrypt a compressed file Compressing and Encrypting Data on an NTFS Volume (Skill 3)

8. 5.8 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-3 Creating a new folder (Skill 3)

9. 5.9 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-4 The Properties dialog box (Skill 3) Click to open the Advanced Attributes dialog box

10. 5.10 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-5 Advanced Attributes dialog box with compression enabled (Skill 3)

11. 5.11 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-6 Confirm Attribute Changes dialog box (Skill 3)

12. 5.12 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-7 Advanced Attributes dialog box with encryption enabled (Skill 3)

13. 5.13 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems  Read permissions  View file and folder names  Execute program files  Navigate within the shared folder  Change permissions  Add files to the shared folder  Create new folders within the shared folder  Modify the content and attributes of the files  Delete files and folders  Execute all of the tasks included in the Read permission  Full Control permissions  Modify file permissions  Take file ownership  Perform all of the tasks allowed by the Change permission Assigning Shared Folder Permissions (Skill 4)

14. 5.14 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-8 Sharing a folder (Skill 4)

15. 5.15 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-9 Adding a user account (Skill 4)

16. 5.16 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-10 Assigning shared folder permissions (Skill 4)

17. 5.17 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems  NTFS permissions  Restrict unauthorized access to files and folders  Secure network resources by controlling the level of access for each user  Standard NTFS folder permissions  Read  Write  List Folder Contents  Read & Execute  Modify  Full Control Setting NTFS Permissions (Skill 5)

18. 5.18 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Setting NTFS Permissions (2)  Standard NTFS file permissions include:  Read  Write  Read & Execute  Modify  Full Control (Skill 5)

19. 5.19 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Setting NTFS Permissions (3)  When you apply permissions to a drive or folder, you are also applying those permissions to all files and folders underneath it, by default  Guidelines for assigning NTFS permissions  Create folders to organize data into categories  Assign users the lowest level of permissions required for them to perform their jobs  Assign the Read and Write permissions to the Users group  Avoid assigning the Full Control Permission for a folder  Deny permissions sparingly  Assign permissions to groups rather than to individual user accounts (Skill 5)

20. 5.20 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-11 Advanced Security Settings dialog box (Skill 5)

21. 5.21 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems  Other important factors  NTFS permissions can be inherited  Assign multiple NTFS permissions  NTFS file permissions override NTFS folder permissions  A denied permission overrides an allowed permission Setting NTFS Permissions (4) (Skill 5)

22. 5.22 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-12 Assigning the Write Permission (Skill 5) The Read & Execute, List Folder Contents, and Read NTFS permissions are assigned to user accounts by default

23. 5.23 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems  Standard NTFS permissions should suffice in most cases  Special level of permissions are available  Set and view special permissions in the Advanced Security Settings for dialog box from within the file properties  This dialog box gives you access to all possible permissions available for a file or folder  Do not configure special permissions unless absolutely necessary because setting them may make it difficult to determine the level of access assigned to a user Setting Special Access Permissions (Skill 6)

24. 5.24 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-13 The Security tab in the Properties dialog box for a file or folder (Skill 6)

25. 5.25 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-14 Jennifer Johnson’s special permissions (Skill 6)

26. 5.26 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-15 The entry for Jennifer Johnson (Skill 6)

27. 5.27 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-16 Giving Jennifer the Change Permissions permission (Skill 6)

28. 5.28 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems  Steps to follow if a user cannot access files and folders  Verify that permissions have been assigned to the user account and check to see if there any permission denials that are overriding the assigned permissions  Check for permissions and denials assigned to groups to which the user is a member  If the resource is remote, check both shared folder and NTFS permissions  Make sure the access token has been updated  Use the Effective Permissions tab on the Advanced Security Settings for dialog box  Query the file system and group memberships for a user to determine the effective permissions the user has  Take all of the user’s group memberships into account Troubleshooting Permissions (Skill 7)

29. 5.29 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-17 The Effective Permissions tab (Skill 7)

30. 5.30 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-18 Jennifer Johnson’s effective permissions (Skill 7)

31. 5.31 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Distributed file system (Dfs)  Allows users to locate files and folders spread across the network quickly and easily  Dfs topology  A hierarchical structure  Includes a Dfs root, one or more Dfs links, and one or more Dfs shared folders, or replicas, to which each Dfs link points  Dfs root  A local share that acts as the starting point and host to other shared resources  One server or domain is chosen as the Dfs root, which is stored on the physical server running the Dfs service Introducing Distributed File System (Skill 8)

32. 5.32 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-19 Dfs links (Skill 8)

33. 5.33 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Types of Dfs roots  Stand-alone  Configured locally on a computer  Stores all of the information in the local Registry  Consists of only a single level of Dfs links  Does not provide data backup or replication  Domain  Also known as a fault-tolerant root  Is integrated with Active Directory Introducing Distributed File System (2) (Skill 8)

34. 5.34 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Dfs advantages  Easy access to network resources  Simplified network administration  Support for fault tolerance and load balancing  Support for network permissions  Integration with Internet Information Services (IIS) Introducing Distributed File System (3) (Skill 8)

35. 5.35 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-20 Selecting the root type (Skill 8)

36. 5.36 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-21 Specifying the Dfs root name (Skill 8)

37. 5.37 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-22 Completing the New Root Wizard (Skill 8)

38. 5.38 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-23 New Dfs Root in the Distributed File System console (Skill 8)

39. 5.39 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-24 Checking the status of a Dfs root (Skill 8) A working Dfs shared folder will be displayed with a green check mark in a white circle on its folder icon, and a disconnected shared folder will be displayed with a white “x ” in a red circle

40. 5.40 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Network administrator tasks  Adding Dfs links to expand the Dfs topology  Removing Dfs  Disabling and enabling a Dfs link  Disable a Dfs link when you do not need it for a period of time or if you must temporarily restrict users from accessing some shared files  Activate the disabled Dfs link when required Managing a Dfs Root (Skill 9)

41. 5.41 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-25 Creating a new Dfs link (Skill 9)

42. 5.42 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-26 Specifying the time duration for storing the Dfs link (Skill 9)

43. 5.43 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 5: Working with File Systems Figure 5-27 The new Dfs link (Skill 9)