Sharing Permissions within a Group

Let’s create two folders on the desktop,

1) Accounting

2) Development

 

Right Click on Account Folder->Properties->Sharing Tab->Click on Share button->Click on Share->Done.

 

shares and permission1

 

shares and permission2

 

⇒ Click on Share.

 
shares and permission3

 

⇒ Select the users whom you want to give access.

 

shares and permissio4

 

⇒ Click on Done.

 

Explain about the permissions ?

 

shares and permission5

 

In order to make a resource to be available over the network and to be accessed by network users, we need to implement sharing.

The moment we create a share on a server, the server acts as a file server.

Share a folder.

Go to the properties of the folder >> security Tab.

Here you can check which user have - what kind of permissions

 

shares and permission6

 

You can also add permission to the new user form EDIT.

 

shares and permission7

 

shares and permission8

 

Permissions

Using permissions an administrator can either allow or deny access to a resource.

Resource can be a network resource or local resource

 

Permissions are two types

  1. Share level
  2. File system or NTFS

 

Share level Permissions:

Share level permissions are applied over the network.

Share level permissions are not applied on the local machine where the resource is existing.

 

There are three types of share level permissions

Full control          RWXDO (Read/Write/Execute/Delete/Ownership)

Change RWXD Read        R

 

NTFS Permissions:

NTFS permissions are powerful permissions and they offer file and folder level security. NTFS permissions are useful for securing locally available resources.

 

NTFS Features:

File/folder level security

Compress

Encryption

Quotas

Reduced fragmentation

Hot-fixing

Volume shadow copies services

Mounting

Separate recycle bin for each user

NTFS permissions

Full control          RWXDO

Modify RWXD

Read & Execute                RX

List folder contents L

Read      R Write RWX

 

Home Folder and Configuring it 

The home folder is a user personal folder. It will be with the user profile.

Where ever user logged in a home folder will be mapped as a Network Drive.

To configure it, create a shared folder.

Go to user properties >> Profile Tab

Give the share path under home folder section and select a drive letter.

 

shares and permission9

 

Taking Ownership on Folder 

Go to any share folder properties

Under security tab select ‘Advanced’.

 

shares and permission10

 

shares and permission11

 

Go to owner >> Edit.

 

shares and permission12

 

Select and Click on Apply – OK

 

shares and permission13

 

You can verify the owner and replace the owner back with same steps.

 

Default Share Variables

.Default Microsoft Windows hidden shares are as follows:

ADMIN$ - The default system root or Windows directory.

C$ and x$ - The default drive share, by default C$, is always enabled. X$ represents any other partitions or drives found by Windows that will also be shared, e.g. D$, E$, etc.

FAX$ - Share used by fax clients to access cover pages and other files on a file server.

IPC$ - See the IPC definition for additional information about IPC.

PRINT$ - Share used by printers, enabling remote administration on printers.

NETLOGON: This is a resource that is used on domain controllers.

SYSVOL: This is a resource that is used on domain controllers.

 

Access Control List in Windows Server

An access control list (ACL) is an ordered list of access control entries (ACEs) that define the protections that apply to an object and its properties. Each ACE identifies a security principal and specifies a set of access rights allowed, denied, or audited for that security principal.

 

Topics Summary