guide to mcse 70-270, second edition, enhanced 1 managing ntfs permissions ntfs only file system...

Guide to MCSE 70-270, Second Edition, Enhanced 1

Managing NTFS Permissions

• NTFS• Only file system supported by Windows XP that offers file-

level security

• Determines what can be done to a file system object and who can perform those actions

• Different permissions for folders and files


NTFS File and Folder Permissions

• Read• Write• List folder contents• Read & execute• Modify• Full control• Configured on the Security tab of object’s Properties

dialog box


Rules for Working With NTFS Permissions

• NTFS object permissions always apply• Permissions are cumulative• Override any contradictory settings on the parent or

container folder• Deny overrides all other specific Allows


Inheritance of Permissions

• New object assumes permissions of parent container• Moving or copying an object from NTFS to FAT

• NTFS settings are lost

• Object inherits the FAT attributes and settings of its new container

• Moving or copying an object from FAT to NTFS• Object inherits NTFS settings and permissions of its new

container


Troubleshooting Access and Permission Problems

• Most access problems:• Resource object has wrong settings

• Or user account has wrong settings

• Avoid Common problems:• Grant permission only as needed.

• Rely upon NTFS to restrict access

• Grant Full Control only when necessary, even on shares

• Change permissions on a folder level, allow changes to affect all child elements


Simple File Sharing

• Used when quick and easy file sharing is needed• Commonly used in home networks• No granular permission control• Effective only when Windows XP is a member of

workgroup• Dragging and dropping folders and drives into Shared

Documents folder


Managing Shared Folders

• Sharing tab• Found on both

FAT/FAT32 and NTFS folder Properties dialog boxes

• Used to enable remote access


Working With Media Folders and The Customize Tab

• My Documents, My Music, and My Pictures folders• Default storage locations for:

• Documents

• Music files

• Images

• Top-level media folders cannot be altered• Customize tab

• Used to define type of folder the mount point represents


Zipping Files and Compressed Folders

• Zipped files • Preferred method of moving large or multiple files around

over the Internet

• Compressed files that house one or more files into a single .zip file

• Zipping capabilities built into file system of XP


Burning CDs

• Support for writing files to a blank recordable CD Included in XP

• Ability to duplicate CDs• Record audio CDs from other audio CDs or music

files (through Windows Media Player)• Erase CD-RWs


Using Offline Files

• Work with network files when not connected to network

• Does not change normal access methods• Maintains the duplicate offline version of the files• Redirections completely unseen by user


Folder Redirection

• Alter physical storage location of commonly used folders

• Redirect to a network server • Retain original local access methods• To configure:

• Local users alter location of My Documents folder

• Group policy redirects to a share on a network server


Removable Media

• Include any storage device installed onto a Windows XP system

• Tape devices• DVD and CD-ROM drives• Optical drives• Zip and Jaz drives• Can be configured through Device Manager