1. Managing Data by Using NTFS

2. Overview Introduction to NTFS Permissions How Windows 2000 Applies NTFS Permissions Using NTFS Permissions Using Special NTFS Permissions Compressing Data on an NTFS Partition Configuring Disk Quotas on NTFS Partitions Securing Data by Using EFS

3. Introduction to NTFS Permissions NTFS PartitionACLACL User1 User2 ReadRead Group1 User1 Read User1 Read Group1 Full Control Group1 Full Control

4.  How Windows 2000 Applies NTFS Permissions Multiple NTFS Permissions NTFS Permissions Inheritance Copying and Moving Files and Folders Class Discussion: Applying NTFS Permissions

5. Multiple NTFS Permissions NTFS Permissions Are Cumulative File Permissions Override Folder Permissions Deny Overrides Other Permissions NTFS Partition File1 File2 Group B Group A Deny Write to File2 WriteWrite User1 ReadRead Read/Write Folder A

6. NTFS Permissions Inheritance Folder A Access to File 1 No Access to File 1 Prevent Inheritance Permission Inheritance File1 Read/WriteRead/Write Read/WriteRead/Write Folder A File1

7. Copying and Moving Files and Folders NTFS Partition D:\ NTFS Partition E:\ NTFS Partition C:\ All Copying Inherits Permissions Only Moving to the Same Partition Retains Permissions CopyCopy Move Copy or Move

8. Class Discussion: Applying NTFS Permissions Users Group Write to Folder1 Sales Group Read to Folder1 Users Group Write to Folder1 Sales Group Read to Folder1 Users Group Read to Folder1 Sales Group Write to Folder2 Users Group Read to Folder1 Sales Group Write to Folder2 Users Group Modify to Folder1 File2 should only be accessible to Sales Group, and only for read access Users Group Modify to Folder1 File2 should only be accessible to Sales Group, and only for read access NTFS Partition File2 Folder1 Folder2 File1 Users Group Sales Group User1

9.  Using NTFS Permissions Granting NTFS Permissions Setting Permission Inheritance Best Practices for Granting NTFS Permissions

10. Granting NTFS Permissions Folder1 Properties GeneralWeb SharingSharing Security Name Everyone Add... Remove Advanced... OKCancel Apply Allow inheritable permissions from parent to propagate to this object. Full Control Modify Read & Execute List Folder Contents Read Permissions Write

11. Setting Permission Inheritance Folder1 Properties GeneralWeb SharingSharing Security Name Everyone Add... Remove Advanced... OKCancel Apply Allow inheritable permissions from parent to propagate to this object. Full Control Modify Read & Execute List Folder Contents Read Write You are preventing any inheritable permissions from propagating to this object. What do you want to do? -To copy previously inherited permissions to this object, click Copy. -To remove the inherited permissions and keep only the permissions explicitly specified on this object, click Remove. -To abort this operation, click Cancel. CopyRemoveCancel Security Permissions

12. Best Practices for Granting NTFS Permissions Grant Permissions to Groups As Opposed to Users Group Resources to Simplify Administration Only Allow Users the Level of Access That They Require Grant Read & Execute and Write Permissions for Data Folders Grant Read & Execute Permissions for Application Folders Create Groups According to the Access That the Group Members Require

13.  Using Special NTFS Permissions Introduction to Special NTFS Permissions Granting Special NTFS Permissions

14. Introduction to Special NTFS Permissions ~~~~~ ~~~~~ Permission to Change Permissions & Take Ownership Owner, Administrator Users, Groups Change Permissions Take Ownership Change Permissions Take Ownership Standard Permission Special Access Permissions Read Read Data Read Attributes Read Permissions Read Extended Attributes Read Data Read Attributes Read Permissions Read Extended Attributes

15. Granting Special NTFS Permissions Program Files Properties Access Control Settings for Program Files Permission Entry for Program Files General Web Sharing Sharing Security Permissions Auditing Owner Object TypeNamePermission AllowAdministrators (NWTR…Full Control AllowAuthenticated UsersRead & Exec… AllowCreator OwnerFull Control Allow Server Operators (NWT…Modify Allow SystemFull Control Add... This permission is inherited directly on this object and inheriting permissions, clear the checkbox below. You parent object where it is defined. This permission is RemoveView/Edit... Allow inheritable permissions from parent to propagate Reset permissions on all child objects and enable prop permissions. OK Cancel Clear AllApply these permissions to objects and/or containers within this container only Permissions:AllowDeny Name: Administrators [(NWTRADERS\Admi Change... Apply onto: This folder, subfolders and files Traverse Folder / Execute File List Folder / Read Data Read Attributes Read Extended Attributes Create Files / Write Data Create Folders / Append Data Write Attributes Write Extended Attributes Delete Subfolders and Files Delete Read Permissions Change Permissions Take Ownership

16.  Compressing Data on an NTFS Partition Introduction to Compressed Files and Folders Compressing Files and Folders Copying and Moving Compressed Files and Folders Best Practices for Compressing Data

17. Introduction to Compressed Files and Folders Space Allocation Compression State Display Color Access to Compressed Files Through Applications NTFS Partition FileB FileA

18. Compressing Files and Folders FolderA Properties General Web SharingSharing Security FolderA Type: Location: Size: Size on disk: Contains: Created: Attributes: File Folder C:\ 0 bytes 2.00 KB (2,048 bytes) 1 Files, 0 Folders Wednesday, September 16, 1998, 10:44:01 AM Read-only Hidden Advanced... OKCancel Apply Advanced Attributes Choose the settings you want for this folder When you apply these changes you will be asked if you want the changes to affect all subfolders and files as well. Archive and Index attributes Folder is ready for archiving For fast searching, all Indexing Service to index this folder Compress or Encrypt attributes Compress contents to save disk space Encrypt contents to secure data OKCancel

19. Copying and Moving Compressed Files and Folders NTFS Partition RetainsRetains Inherits InheritsInherits A ACopyCopy NTFS Partition D D B BMoveMove InheritsInherits C CCopyCopy MoveMove

20. Best Practices for Compressing Data Determine Which File Types to Compress Do Not Compress Already Compressed Files Use Different Display Colors for Compressed Files and Folders Compress Static Data Rather Than Data That Changes Frequently

21.  Configuring Disk Quotas on NTFS Partitions Using Disk Quotas Setting Disk Quotas

22. Using Disk Quotas Usage Calculation Based on File and Folder Ownership Compression Ignored When Calculating Usage Free Space for Applications Based on Quota Limit Disk Quotas Tracked for Each NTFS Partition

23. Setting Disk QuotasOptionOptionDescriptionDescription Enable quota management Enable disk quota management Deny disk space to users exceeding quota limit Users cannot write to volume when they exceed their hard disk space allocation Do not limit disk usage No hard disk space limit for users Limit disk space to Specify amount of disk space users can use Set warning level to Specify amount of disk space users can fill before event is logged Quota Entries Add entries, delete entries, view properties for entries NTFS Partition User 1 100 MB User 2 35 MB

24. Review Introduction to NTFS Permissions How Windows 2000 Applies NTFS Permissions Using NTFS Permissions Using Special NTFS Permissions Compressing Data on an NTFS Partition Configuring Disk Quotas on NTFS Partitions