Microsoft Windows Server 2003 (70-290) Tutorials
Managing Permissions / NTFS Special Permissions
Visitors to VTC.com will be able to view all introductory videos for each training course.
Free Trial Members will gain access to first three chapters for each training course.
Full Access Members have full access to VTC.com�s entire library of video tutorials.
Learn More
Subtitles of the Movie (Microsoft Windows Server 2003 (70-290) / Managing Permissions / NTFS Special Permissions)
All the permissions that we have talked about so far are the standard permissions that we can easily set with NTFS, and in most cases these permissions we understand what they do will allow us to do what we need to do with files and folders. But we can also get even more granular in nature in our permission settings so let us right click on Outlook Express and click on properties. We have special permissions for files and for folders. We are going to take a look at these and, then we are going to take a look at how we will add in permissions for anyone whether they are standard or whether that is special. So let us click on the security tab and we notice that administrators have full control which was inherited. Authenticated users have read and execute plus folder contents and read which was inherited. Creator owner does not have any permissions, server operator has modify everything below modify which was inherited and the system has full control. If you wanted to add anyone in whether it is standard permission or special permission we click on add and then type in the name of the group, or the name of the individual. For example we wanted to add Al, and we were to type Al and click on add. Now typically you would not assign permissions directly to an individual. So if we want to remove Al from the list we make sure that Al is selected and, then click on remove and we can remove or add additional permissions as we choose using these tabs. Now for special permissions let us take a look at for example this read and, execute this folder contents and read from authenticated users or really what all does that mean. Now let us click on advanced, now if we take a look at authenticated users on advanced we see that we have read and execute and it is applied to this folder, and to sub folders. But we can edit that if you click on edit tab and we will see now that really what it means is that we have traverse folder. We have list folder and read data, read attributes, read extended attributes and notice that all of this was inherited from above, so if we click on it we cannot change it because it was inherited from above. So where can we change it? Well, we have to change it where it was set so let us click on Ok here, Ok here and then Ok one more time, now let us go upto programme files, which is higher in the hierarchy where this was really set and then to properties then to security and then to authenticated users. We can see that it was actually set here. Now let us click on advanced. Now for authenticated users we have read and execute permissions. Notice that says read and execute right here. Now we are going to click on edit and we can see now that we have the choices of the granular nature and permission setting. Notice we can allow or we can deny. Most of the time you do not deny permissions. Most of the time what one want to do is either allow or deny by not allowing. If we deny then the deny becomes a trump card if a person is denied permissions for any object or for any resource, then it does not matter how many other groups they are in that will allow them permissions if they are denied in any group then they are denied. We will talk more about that in this training at the end of this chapter. But if we take a look at the authenticated users and we take a look at how their permissions are set, we see that they are not right now allowed to create files or right data so let us given the opportunity to do that. Now let us give them the opportunity to create folders and append data as well and then we click on ok. Now notice that instead of saying read and execute now the permission says special. So special permission just mean that I am not doing the standard. And whatever I decided to do after that is whatever I decide to do. So once we click on edit then we are configuring special permission, for example for the server operators that have modified, we click on edit and then we could modify their special permissions. We can also set with special permissions where it applies so for example, default status for folders and sub folders and files which most of the time is going to work for us. But if we click on the drop down we could select this folder only or for this folder and sub folders but not for files or for this folder, and for files sub folders and files only, whenever it is going to work for us. We set the default is this folder sub folders in files. So this is the way that we set special permissions and, we need to understand how all these permissions go together so in the next section we take a look at best practices and combinations of permissions.
Tutorial Information
| Course: | Microsoft Windows Server 2003 (70-290) |
| Author: | Bill Ferguson/Certified Instructor |
| SKU: | 33497 |
| ISBN: | 1932072918 |
| Release Date: | 2004-06-03 |
| Duration: | 8.5 hrs / 107 lessons |
| Captions: | No |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |
VTC Sign up & Benefits
- Unlimited Access
- 81,350 Video Tutorials (14,200 free)
- Video Available as Flash or QuickTime
- Over 715 Courses
- $30 for One Month Access
- Multi-User Discounts Available
