70-290: MCSE Manual for Dealing with a Microsoft Windows Server 2003 Environment, Improved Section 5: Overseeing Record .


78 views
Uploaded on:
Category: People / Lifestyle
Description
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 5: Managing File Access. Targets. Recognize and comprehend the contrasts between the different record frameworks bolstered in Windows Server 2003 Create and oversee shared envelopes
Transcripts
Slide 1

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 5: Managing File Access

Slide 2

Objectives Identify and comprehend the contrasts between the different record frameworks bolstered in Windows Server 2003 Create and oversee shared organizers Understand and design the common envelope authorizations accessible in Windows Server 2003 Understand and arrange the NTFS consents accessible in Windows Server 2003 Guide to MCSE 70-290, Enhanced

Slide 3

Objectives (proceeded with) Determine the effect of consolidating shared organizer and NTFS consents Convert segments and volumes from FAT to NTFS Guide to MCSE 70-290, Enhanced

Slide 4

Windows Server 2003 File Systems Three principle document frameworks File Allocation Table (FAT) FAT32 NTFS Final decision of document framework relies on upon How framework will be utilized Whether there are numerous working frameworks Security prerequisites NTFS is most profoundly prescribed Guide to MCSE 70-290, Enhanced

Slide 5

FAT Used by MS-DOS Supported by all forms of Windows since Traditionally constrained to parcels up to 2 GB Windows Server 2003 adaptation underpins segments up to 4 GB Limitations Small segment sizes No record framework security highlights Disk space use is poor Guide to MCSE 70-290, Enhanced

Slide 6

FAT32 A subsidiary of the FAT document framework Supports allotment sizes up to 2 TB Still does not give propelled security highlights Cannot arrange consents on record and envelope assets Guide to MCSE 70-290, Enhanced

Slide 7

NTFS Introduced with Windows NT working framework Current rendition (variant 5) Windows NT 4.0 Windows 2000 Windows XP Windows Server 2003 Theoretically bolsters segment sizes of up to 16 Exabytes (EB) Practically bolsters greatest segment sizes from 2 TB to 16 TB Guide to MCSE 70-290, Enhanced

Slide 8

NTFS (proceeded with) Advantages of NTFS Greater adaptability and execution on bigger segments Support for Active Directory on frameworks designed as area controllers Ability to arrange security consents on individual records and envelopes Built-in backing for pressure and encryption Ability to design plate portions for individual clients Support for Remote Storage Recovery logging of circle exercises Guide to MCSE 70-290, Enhanced

Slide 9

Creating and Managing Shared Folders Shared organizer An information asset made accessible over a system to approved system customers Specific consents required for making, perusing, adjusting Groups that can make shared envelopes: Administrators Server Operators Power Users (just on part servers) Guide to MCSE 70-290, Enhanced

Slide 10

Creating and Managing Shared Folders (proceeded with) Several approaches to make shared envelopes Two vital techniques Windows Explorer Interface Computer Management comfort Also permits shared envelopes to be checked Guide to MCSE 70-290, Enhanced

Slide 11

Using Windows Explorer Used since Windows 95 Can make, keep up, and share envelopes Folders can be on any drive associated with the PC Folders are partaken in Windows Explorer by getting to the Sharing tab of organizer\'s properties Guide to MCSE 70-290, Enhanced

Slide 12

Using Windows Explorer (proceeded with) Guide to MCSE 70-290, Enhanced

Slide 13

Using Windows Explorer (proceeded with) Shared name of envelope does not need to be the real document name Hand symbol used to demonstrate shared status Shared organizers can be escaped My Network Places and Network Neighborhood Place dollar sign ($) after name, e.g., Salary$ Number of shrouded regulatory shares made consequently at establishment Guide to MCSE 70-290, Enhanced

Slide 14

Using Windows Explorer (proceeded with) Guide to MCSE 70-290, Enhanced

Slide 15

Using Windows Explorer (proceeded with) Guide to MCSE 70-290, Enhanced

Slide 16

Using Computer Management Computer Management console is a pre-characterized Microsoft Management Console (MMC) Allows you to share and screen envelopes for nearby and remote PCs Allows you to quit sharing if wanted Guide to MCSE 70-290, Enhanced

Slide 17

Using Computer Management (proceeded with) Share a Folder Wizard Used to make envelopes in Shared Folders segment of Computer Management Used to give preconfigured or manual consents All clients have perused just get to Administrators have full get to; others have perused just get to Administrators have full get to; others have perused and compose access Custom offer and organizer authorizations Guide to MCSE 70-290, Enhanced

Slide 18

Monitoring Access to Shared Folders Monitoring includes Who is utilizing shared records What shared documents are open at any given time Other capacities Disconnect clients from an offer Send system ready messages Primary observing apparatus is Computer Management Guide to MCSE 70-290, Enhanced

Slide 19

Monitoring Access to Shared Folders (proceeded with) Guide to MCSE 70-290, Enhanced

Slide 20

Managing Shared Folder Permissions A mutual envelope has an optional access control list (DACL) Contains a rundown of client or gathering references that have been permitted or denied consents Each reference is an entrance control section (ACE) Accessed from Permissions catch on Sharing tab of organizer\'s properties Permissions just apply to network clients, not those signed on specifically to neighborhood machine Guide to MCSE 70-290, Enhanced

Slide 21

Managing Shared Folder Permissions (proceeded with) Guide to MCSE 70-290, Enhanced

Slide 22

Managing Shared Folder Permissions (proceeded) To deny access to a client or gathering Windows Server 2003 does exclude No Access offer authorization Must unequivocally deny access to each separately Default authorization is perused access for Everyone gathering Should be instantly tended to when an offer is made Folder authorizations are acquired by every contained item Guide to MCSE 70-290, Enhanced

Slide 23

NTFS Permissions Resources situated on a NTFS segment or volume can be given NTFS authorizations A chairman must Know how authorizations are connected Standard and extraordinary NTFS consents accessible How successful consents are resolved Guide to MCSE 70-290, Enhanced

Slide 24

NTFS Permission Concepts NTFS authorizations are designed by means of the Security tab NTFS authorizations are aggregate Access disavowal dependably supersedes allowed access NTFS organizer consents are acquired unless generally indicated NTFS authorizations can be set at document or envelope level Guide to MCSE 70-290, Enhanced

Slide 25

NTFS Permission Concepts (proceeded with) another ACE has default consent Read and Read and Execute for documents List Folder Contents for envelopes Windows Server 2003 has set of standard authorizations in addition to exceptional authorizations Guide to MCSE 70-290, Enhanced

Slide 26

NTFS Permission Concepts (proceeded with) Guide to MCSE 70-290, Enhanced

Slide 27

Special NTFS Permissions Can give pretty much access than standard authorizations Special authorizations got to from Advanced catch in the Security tab on Properties discourse box for asset Permission Entry exchange box empowers task of authorizations and control of legacy settings Guide to MCSE 70-290, Enhanced

Slide 28

Special NTFS Permissions (proceeded with) Guide to MCSE 70-290, Enhanced

Slide 29

Special NTFS Permissions (proceeded with) Inheritance settings This envelope just This organizer, subfolders, and documents (default) This organizer and subfolders This envelope and documents Subfolders and records just Subfolders just Files just Guide to MCSE 70-290, Enhanced

Slide 30

Special NTFS Permissions (proceeded with) Guide to MCSE 70-290, Enhanced

Slide 31

Special NTFS Permissions (proceeded with) Guide to MCSE 70-290, Enhanced

Slide 32

Determining Effective Permissions that really apply to a client can be the aftereffect of enrollment in various gatherings Prior to Windows Server 2003, deciding compelling authorizations was done physically In Windows Server 2003, there is an Effective Permissions tab in Advanced Security Settings discourse box for asset Shows particular consents for a client or gathering Guide to MCSE 70-290, Enhanced

Slide 33

Determining Effective Permissions (proceeded with) Guide to MCSE 70-290, Enhanced

Slide 34

Combining Shared Folder and NTFS Permissions NTFS consents can be joined with offer authorizations When getting to an offer over a system, if both apply, utilize most prohibitive When getting to a document locally, just NTFS authorizations apply Guide to MCSE 70-290, Enhanced

Slide 35

Converting a FAT Partition to NTFS For most astounding security, segments and volumes ought to be designed to utilize NTFS Command-line utility, CONVERT, will change over FAT or FAT32 segments and volumes to NTFS All current documents and organizers are held CONVERT can\'t change over NTFS to FAT or FAT32 Guide to MCSE 70-290, Enhanced

Slide 36

Summary Windows Server 2003 backings 3 record frameworks FAT FAT32 NTFS (favored) Two sorts of authorizations Shared envelope (arrange just) Tools are Windows Explorer, Computer Management, and NET SHARE order NTFS (nearby and system) NTFS segments just Guide to MCSE 70-290, Enhanced

Slide 37

Summary (proceeded with) Permissions Shared envelopes, 3 standard authorizations NTFS, 6 standard and 14 uncommon authorizations Permissions are total Effective consents can be resolved from Advanced Security Settings of an asset Shared organizer and NTFS consents can be joined CONVERT utility can change over a FAT or FAT32 segment to the NTFS record framework Guide to MCSE 70-290, Enhanced

Recommended
View more...