Share and NTFS Permissions - - vimore.org

Share and NTFS Permissions

Share and NTFS Permissions

YouTube

This video will look at what happens to a user access when share and NTFS permissions are used together. Check out http://itfreetraining.com for more of our always free training videos. Using these effectively together can greatly improve the security of your network while still allowing the user to access what they need to. Download the PDF Handout: http://ITFreeTraining.com/handouts/server/share-ntfs.pdf Share and NTFS Permissions When you create a file share, you are able to configure 3 basic permissions on the share. Full control gives the user’s read/write/delete, the ability to take ownership and change permissions. Change allows the user to read/write/delete, and read allows the user to read. NTFS has five basic permissions. Full control has the same effect as share full control and read has the same effect and the read share permission. The modify permission in NTFS is the same and the change permission in share permission. If you have configured different shares and NTFS permissions, the important point to remember is that that most restrictive permission will always win. Consider some examples. 1) If the share permission was set to read, and the NTFS set to full control, the user, when accessing the share, would get the permission read. 2) If the share had full control and the NTFS permissions were set to read, the user would once again only have read permission since the most restrictive permission will always win. 3) If the share permission was set to change and the NTFS permission was set to full control, the user would get modify access. Modify access is essentially the change permission. Since the change permission was the most restrictive permission, the user will have read/write/delete which is change or modify access. 4) If the share permission was set to full control and the NTFS permission was set to modify, the user would get modify access. Modify access is essentially the change permission. Since the change permission was the most restrictive permission, the user will have read/write/delete which is change or modify access. The choice of which permission to use comes down to the choice of the individual administrator. Some administrators configure the share permissions with full control and then subtract permissions using NTFS. Others will configure security at the share level. The important point to remember is that NTFS permission allows granular control while share permissions are a broad stroke approach. Demonstration DepData will be configured to allow full control at the share level. Permissions will be subtracted at the folder level using NTFS. 1) Right click the folder DepData and select properties. 2) Select the tab sharing and the press the button advanced sharing. 3) From the advanced sharing dialog press the button at the bottom permissions. 4) This will show that everyone has full control to the share. 5) Next select the security tab and notice what permissions have been configured. The users have been configured with modify access. This essentially means that a user accessing the share will lose full control access that was granted at the share level and be left with modify access. However, users like administrators that have been granted full control will be allow to have this access since at the share level it has been configured with full control. Depdata2 will be configured to share permission for user. 1) Right click the folder DepData2 and select properties. 2) Select the tab sharing and then press the button advanced sharing. 3) From the advanced sharing dialog press the button at the bottom permissions. 4) In this case, the everyone permission has been added with change access. Also notice the second entry for administrators gives administrators full control. In this example there are only two groups so this is not that difficult for the administrator to configure this. However, if there were more groups, this becomes more work to keep up to date. 5) Next select the security tab and notice what permissions have been configured. Notice that users and administrators have been configured with full control. However, the user will only get change access because this was what was configured at the folder level. You can see that if an administrator forgot to configure NTFS permissions, the user would not get any additional access as the share permission acts as a safety net to prevent the user getting more permissions then they should have. 6) Using this method, it is also possible to remove user access. For example, if you want the user to only have read access to a file or folder you would only need to modify the NTFS permission to remove the write access for that user. Description too long for YouTube. Please see following link for rest of the description: http://itfreetraining.com/server#share-ntfs



NTFS Basic Permissions

This video will look at the basic NTFS permissions that are available in Windows. Having an understanding of these permissions will give the administrator the f

YouTube

POP3 vs IMAP - What's the difference?

What is POP and IMAP? How does email work? This is an animated video explaining the difference between POP and IMAP. These are email protocols that are used to

YouTube

China Super High-Efficiency New Electric Motor Technology

China Super High-Efficiency New Electric Motor Technology This is a video DC Motor/Generator for Electric Vehicles, Marine and Aerospace applications. It show

YouTube

Explaining File Systems: NTFS, exFAT, FAT32, ext4 & More

NTFS, FAT32, exFAT, ext4 and APFS are just some of the file systems used to organize data on storage drives. This video outlines the differences between these

YouTube

NTFS Explicit and Inherited Permissions

Check out http://YouTube.com/ITFreeTraining or http://itfreetraining.com for more of our always free training videos. NTFS allows permissions to be either confi

YouTube

RAID and Storage Solutions

This video will look at a number of different storage solutions. Check out http://YouTube.com/ITFreeTraining or http://itfreetraining.com for more of our always

YouTube

NFS Sharing Demonstration

This video will look at how to use the NFS server and client features in Windows as well as a quick look at Ubuntu. There is a lot to NFS and this video just co

YouTube

Server Basics (4) | Network Shares | Permissions

How to configure network shares and permissions (basics). Windows Server 2008 R2 Enterprise. Creating network shares and allowing the proper access for your use

YouTube

Introduction to File and Share Permissions in Windows Server 2012

Info Level: Intermediate Presenter: Eli the Computer Guy Date Created: April 17, 2013 Length of Class: 35:11 Research Assistance: Tracks Windows Server 2012 Pr

YouTube

NTFS File & Folder Permissions - Windows Server 2012 R2

This ittaster tutorial provides an overview of NTFS File & Folder permissions, and demonstrates how to set permissions in Microsoft Windows Server 2012 R2. #Win

YouTube

70-410 Objective 2.1 Lab 2 - NTFS and Share Permissions Interaction

In the following video I explain the interaction of share permissions and NTFS file permissions. The combination of both type of permissions creates the effecti

YouTube

Advanced NTFS Permissions

This video will look at the advanced permissions available in NTFS. Advanced permissions give the administrator more control over how files and folders can be a

YouTube

Introduction to File Sharing using SMB and NFS

This video will look at the two file sharing protocols SMB and NFS. SMB is the primary file sharing protocol developed for Windows computers and NFS is the prim

YouTube

Big Ideas 2019: Technological Breakthroughs Investors Shouldn’t Miss | ARK Invest

ARK researches the universe of innovation platforms and their underlying technologies. On an annual basis we publish research highlighting the technology breakt

YouTube

Basics of Windows Security

This video looks at all the basic parts that form the security model in Windows. Check out http://itfreetraining.com for more of our always free training videos

YouTube

MCITP 70-640: Active Directory forest and trees

Active Directory has forests and trees which are ways of representing multiple domains. Check out http://YouTube.com/ITFreeTraining or http://itfreetraining.com

YouTube

How to Create a Domain User Account in windows server 2012

How to Create a Domain User Account in windows server 2012 Also See: How to install Active Directory ( AD DS ) on Windows Server 2012 https://www.youtube.co

YouTube

Setting Up Your File Sharing Permissions in Windows 7

Full text transcriptions and downloadable versions: http://www.helpdesktv.ca You can share your files and folders in your public folders with anyone who uses y

YouTube

The OSI and TCP IP Model

Welcome to the ITFreeTraining video on the OSI Model. This video will look at the OSI model and in particular, how it relates to the internet protocol. Access

YouTube

Effective Access

Check out http://YouTube.com/ITFreeTraining or http://itfreetraining.com for more of our always free training videos. This video will look at effective access.

YouTube