70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 5: Managing File AccessSlide 2
Objectives Identify and comprehend the contrasts between the different record frameworks bolstered in Windows Server 2003 Create and oversee shared organizers Understand and design the common envelope authorizations accessible in Windows Server 2003 Understand and arrange the NTFS consents accessible in Windows Server 2003 Guide to MCSE 70-290, EnhancedSlide 3
Objectives (proceeded with) Determine the effect of consolidating shared organizer and NTFS consents Convert segments and volumes from FAT to NTFS Guide to MCSE 70-290, EnhancedSlide 4
Windows Server 2003 File Systems Three principle document frameworks File Allocation Table (FAT) FAT32 NTFS Final decision of document framework relies on upon How framework will be utilized Whether there are numerous working frameworks Security prerequisites NTFS is most profoundly prescribed Guide to MCSE 70-290, EnhancedSlide 5
FAT Used by MS-DOS Supported by all forms of Windows since Traditionally constrained to parcels up to 2 GB Windows Server 2003 adaptation underpins segments up to 4 GB Limitations Small segment sizes No record framework security highlights Disk space use is poor Guide to MCSE 70-290, EnhancedSlide 6
FAT32 A subsidiary of the FAT document framework Supports allotment sizes up to 2 TB Still does not give propelled security highlights Cannot arrange consents on record and envelope assets Guide to MCSE 70-290, EnhancedSlide 7
NTFS Introduced with Windows NT working framework Current rendition (variant 5) Windows NT 4.0 Windows 2000 Windows XP Windows Server 2003 Theoretically bolsters segment sizes of up to 16 Exabytes (EB) Practically bolsters greatest segment sizes from 2 TB to 16 TB Guide to MCSE 70-290, EnhancedSlide 8
NTFS (proceeded with) Advantages of NTFS Greater adaptability and execution on bigger segments Support for Active Directory on frameworks designed as area controllers Ability to arrange security consents on individual records and envelopes Built-in backing for pressure and encryption Ability to design plate portions for individual clients Support for Remote Storage Recovery logging of circle exercises Guide to MCSE 70-290, EnhancedSlide 9
Creating and Managing Shared Folders Shared organizer An information asset made accessible over a system to approved system customers Specific consents required for making, perusing, adjusting Groups that can make shared envelopes: Administrators Server Operators Power Users (just on part servers) Guide to MCSE 70-290, EnhancedSlide 10
Creating and Managing Shared Folders (proceeded with) Several approaches to make shared envelopes Two vital techniques Windows Explorer Interface Computer Management comfort Also permits shared envelopes to be checked Guide to MCSE 70-290, EnhancedSlide 11
Using Windows Explorer Used since Windows 95 Can make, keep up, and share envelopes Folders can be on any drive associated with the PC Folders are partaken in Windows Explorer by getting to the Sharing tab of organizer\'s properties Guide to MCSE 70-290, EnhancedSlide 12
Using Windows Explorer (proceeded with) Guide to MCSE 70-290, EnhancedSlide 13
Using Windows Explorer (proceeded with) Shared name of envelope does not need to be the real document name Hand symbol used to demonstrate shared status Shared organizers can be escaped My Network Places and Network Neighborhood Place dollar sign ($) after name, e.g., Salary$ Number of shrouded regulatory shares made consequently at establishment Guide to MCSE 70-290, EnhancedSlide 14
Using Windows Explorer (proceeded with) Guide to MCSE 70-290, EnhancedSlide 15
Using Windows Explorer (proceeded with) Guide to MCSE 70-290, EnhancedSlide 16
Using Computer Management Computer Management console is a pre-characterized Microsoft Management Console (MMC) Allows you to share and screen envelopes for nearby and remote PCs Allows you to quit sharing if wanted Guide to MCSE 70-290, EnhancedSlide 17
Using Computer Management (proceeded with) Share a Folder Wizard Used to make envelopes in Shared Folders segment of Computer Management Used to give preconfigured or manual consents All clients have perused just get to Administrators have full get to; others have perused just get to Administrators have full get to; others have perused and compose access Custom offer and organizer authorizations Guide to MCSE 70-290, EnhancedSlide 18
Monitoring Access to Shared Folders Monitoring includes Who is utilizing shared records What shared documents are open at any given time Other capacities Disconnect clients from an offer Send system ready messages Primary observing apparatus is Computer Management Guide to MCSE 70-290, EnhancedSlide 19
Monitoring Access to Shared Folders (proceeded with) Guide to MCSE 70-290, EnhancedSlide 20
Managing Shared Folder Permissions A mutual envelope has an optional access control list (DACL) Contains a rundown of client or gathering references that have been permitted or denied consents Each reference is an entrance control section (ACE) Accessed from Permissions catch on Sharing tab of organizer\'s properties Permissions just apply to network clients, not those signed on specifically to neighborhood machine Guide to MCSE 70-290, EnhancedSlide 21
Managing Shared Folder Permissions (proceeded with) Guide to MCSE 70-290, EnhancedSlide 22
Managing Shared Folder Permissions (proceeded) To deny access to a client or gathering Windows Server 2003 does exclude No Access offer authorization Must unequivocally deny access to each separately Default authorization is perused access for Everyone gathering Should be instantly tended to when an offer is made Folder authorizations are acquired by every contained item Guide to MCSE 70-290, EnhancedSlide 23
NTFS Permissions Resources situated on a NTFS segment or volume can be given NTFS authorizations A chairman must Know how authorizations are connected Standard and extraordinary NTFS consents accessible How successful consents are resolved Guide to MCSE 70-290, EnhancedSlide 24
NTFS Permission Concepts NTFS authorizations are designed by means of the Security tab NTFS authorizations are aggregate Access disavowal dependably supersedes allowed access NTFS organizer consents are acquired unless generally indicated NTFS authorizations can be set at document or envelope level Guide to MCSE 70-290, EnhancedSlide 25
NTFS Permission Concepts (proceeded with) another ACE has default consent Read and Read and Execute for documents List Folder Contents for envelopes Windows Server 2003 has set of standard authorizations in addition to exceptional authorizations Guide to MCSE 70-290, EnhancedSlide 26
NTFS Permission Concepts (proceeded with) Guide to MCSE 70-290, EnhancedSlide 27
Special NTFS Permissions Can give pretty much access than standard authorizations Special authorizations got to from Advanced catch in the Security tab on Properties discourse box for asset Permission Entry exchange box empowers task of authorizations and control of legacy settings Guide to MCSE 70-290, EnhancedSlide 28
Special NTFS Permissions (proceeded with) Guide to MCSE 70-290, EnhancedSlide 29
Special NTFS Permissions (proceeded with) Inheritance settings This envelope just This organizer, subfolders, and documents (default) This organizer and subfolders This envelope and documents Subfolders and records just Subfolders just Files just Guide to MCSE 70-290, EnhancedSlide 30
Special NTFS Permissions (proceeded with) Guide to MCSE 70-290, EnhancedSlide 31
Special NTFS Permissions (proceeded with) Guide to MCSE 70-290, EnhancedSlide 32
Determining Effective Permissions that really apply to a client can be the aftereffect of enrollment in various gatherings Prior to Windows Server 2003, deciding compelling authorizations was done physically In Windows Server 2003, there is an Effective Permissions tab in Advanced Security Settings discourse box for asset Shows particular consents for a client or gathering Guide to MCSE 70-290, EnhancedSlide 33
Determining Effective Permissions (proceeded with) Guide to MCSE 70-290, EnhancedSlide 34
Combining Shared Folder and NTFS Permissions NTFS consents can be joined with offer authorizations When getting to an offer over a system, if both apply, utilize most prohibitive When getting to a document locally, just NTFS authorizations apply Guide to MCSE 70-290, EnhancedSlide 35
Converting a FAT Partition to NTFS For most astounding security, segments and volumes ought to be designed to utilize NTFS Command-line utility, CONVERT, will change over FAT or FAT32 segments and volumes to NTFS All current documents and organizers are held CONVERT can\'t change over NTFS to FAT or FAT32 Guide to MCSE 70-290, EnhancedSlide 36
Summary Windows Server 2003 backings 3 record frameworks FAT FAT32 NTFS (favored) Two sorts of authorizations Shared envelope (arrange just) Tools are Windows Explorer, Computer Management, and NET SHARE order NTFS (nearby and system) NTFS segments just Guide to MCSE 70-290, EnhancedSlide 37
Summary (proceeded with) Permissions Shared envelopes, 3 standard authorizations NTFS, 6 standard and 14 uncommon authorizations Permissions are total Effective consents can be resolved from Advanced Security Settings of an asset Shared organizer and NTFS consents can be joined CONVERT utility can change over a FAT or FAT32 segment to the NTFS record framework Guide to MCSE 70-290, Enhanced
Introducing Windows 2003 Server MIS 431 –Rev. Spring 2008 Establishment is Simple! Do your pro ...
Windows Server 2003 Security Donald E. Hester CISSP, CISA, MCT, MCSE, MCSA, MCDST, Security+, CT ...
The streak's name drive that shows up in Windows Explorer relies on upon the brand ... Otherwise ...
Earthenware production as ceramics are among the most seasoned items made by people. ... Pottery ...
Assets, for example, documents, envelopes, and printers are secured in WS03 by means of utilizat ...
Pcl.sep: used to print in Printer Control Language (PCL) for printers that can do either PCL or ...
Conjunto de tecnolog as adicionales que se instalan sobre Windows Server 2003 SP1. No feed cambi ...
Check the Hardware Compatibility List (HCL) for Windows Server 2003. ... NetBEUI is not bolstere ...
Windows Server 2003 及 Active Directory 的除錯及災難回復. 時 間： 2005/01/11 ( ...
Craig A. Chestnut. Craig.Brown@globalknowledge.com. Rehearse Leader
Gary Lau CISSP, CISA Principal Consultant North Asia. RSA SecurID ® for Microsoft ® Window ...
Windows Azure for Research Roger Barga & Jared Jackson Contributors include Nelson Araujo, De ...
Recuperación en caso de desastre de Microsoft Exchange Server 2003 . Microsoft Corporation. ...
Session Objectives And Takeaways. Session Objectives: Identify branch office difficulties and op ...
Session Objectives And Takeaways. Portray Active Directory highlights in Windows Server 2008 R2D ...