We will be undergoing scheduled maintenance on May 20th, 2013 at 02:00 GMT.
Visitors to VTC.com will be able to view all introductory videos for each training course.
Free Trial Members will gain access to first three chapters for each training course.
Full Access Members have full access to VTC.com�s entire library of video tutorials.
You should remember that rights are for access and permissions are for resources. That will take you a long way towards understanding what permissions are all about versus when somebody talks about rights. Typically when somebody talks about rights they are talking about access to parts of the system that are given to them by virtue of being a member of a group, possibly a default group, like administrators or server operators but permissions are for resources. Permissions are generally tied to a file or a folder or a printer and permissions allow a user to use that particular resource. So in this chapter we are going to focus on managing permissions. In particular we are going to talk about the importance of managing permissions and kind of do an overview of managing permissions. Then we will focus on share permissions, which open the door to the resource. Then we will focus on NTFS permissions, which allow us more granular control than shares do and also allow us to control access to resources locally. Then we will combine the two and take a look at effective permissions what happens when we have one resource that has different permissions assigned, in other words we have got a user that is in multiple groups and based on their group membership they have different permissions in each of the groups, while what is their effective permissions and how do they share in the NTFS combine to get their effective permissions. We will also take a look at a new tool that Windows Server 2003 has to help us to get the effective permissions for NTFS. Then we will take a look at some best practices in regard to granting permissions. So why are permissions important and how do they work. Well first of all every object in the active directory is fully controlled, as to what it can do to every other object and what every other object can do to it. The way that is controlled is that every object has its own security id that is called SID, because every object is actually a security principle, which means that it has a security id which is unique. When we start assigning permissions we are assigning discretionary access control lists we will take a look at that in just a minute. When we audit security principles we audit SIDs we audit it with systems access control lists, sacos and the individual entries that we make in discretionary access control lists are called access control entries or ACEs. So permissions are important to manage because if these are set improperly then the user gets access to resource they should not. Sometimes it is not as easy as just turning it back off for example if a user has got an access, so that they can read what the top management in the company made in their salary and bonuses last year, and that was not public information then they have been able to see information that we cannot erase from their brain. So it is very important that a Network Administrator controls this access. First step in controlling the access is understanding when to share access to a resource and when not to. Then how to share access to a resource. So in our next section we will talk about share permissions.
| Course: | Microsoft Windows Server 2003 (70-290) |
| Author: | Bill Ferguson/Certified Instructor |
| SKU: | 33497 |
| ISBN: | 1932072918 |
| Release Date: | 2004-06-03 |
| Duration: | 8.5 hrs / 107 lessons |
| Captions: | No |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |