The reason is that if you disable inherited permissions, then it tends to become more difficult to figure out what permissions belong to which folder. This is another check box that can get you into trouble. I strongly recommend never using this one. Earlier I mentioned that the last column of the Permissions properties sheet tells whether the permission applies only to the current file or folder, or to subfolders as well.
If you select this check box, then any permissions that show on the Permissions tab as being applicable to subfolders will be applied to subfolders. The catch is that these permissions will override any permissions that have been explicitly assigned to subfolders. You will almost never want to do this. Effective Permissions I have talked a lot about the effective permissions for a file or folder, but I have not yet answered every question.
Earlier, I stated that it was possible for a user to belong to multiple security groups that have contradictory permissions to a resource. In Windows , you had to calculate the effective permissions for the user yourself by examining which permissions belonged to each group.
However, Windows Server makes this process much easier. To find effective permissions, return to the Advanced Security Settings properties sheet for the file or folder that you are working with, and select the Effective Permissions tab. This tab allows you to enter a user name or a group name and will then display the effective permissions for that user or group.
This takes all of the guesswork out of securing a file or folder. Ownership The last aspect of file security that I want to discuss is ownership. Every file on an NTFS partition has an owner. The owner is the user who created the file or folder. The owner is allowed to control who has what permissions to the file or folder. The reason that I want to discuss this is because sometimes it's necessary to change ownership. For example, suppose that a user creates a folder and assigns some inappropriate permissions to the folder.
To take ownership, an Administrator would open the Advanced Security Settings properties sheet for the folder, select the ownership tab, and then use the Change Owner option. There is also an option to change the ownership on all subfolders. Taking ownership of a file or folder is not purely an administrative function though. While it's true that an administrator always has the option of taking ownership of a file or folder, anyone can take ownership of a file or folder if she has been assigned the right, Take Ownership Of Files Or Other Objects.
The Restore Files And Directories permission also allows someone to take ownership if necessary. When doing so, this only allows the recipient to take ownership of the current file or folder. It does not give the recipient global permissions to take ownership of any file or folder. The recipient actually has to take ownership to complete the process.
Easier than it seems As you can see, file permissions are relatively complex. However, Windows Server makes it much easier to accurately assign permissions than previous versions of Windows did.
You have plenty of flexibility when assigning permissions. Just be careful when assigning permissions so you don't create conflicts that can lead to troubleshooting headaches later. Editor's Picks. The best programming languages to learn in Check for Log4j vulnerabilities with this simple-to-use script. TasksBoard is the kanban interface for Google Tasks you've been waiting for. Paging Zefram Cochrane: Humans have figured out how to make a warp bubble. Comment and share: Controlling access to shared resources in Windows Server.
Show Comments. Hide Comments. My Profile Log out. Join Discussion. Red Flag This Post Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework. The Tek-Tips staff will check this out and take appropriate action.
Click Here to join Tek-Tips and talk with other members! Already a Member? Join your peers on the Internet's largest technical computer professional community. It's easy to join and it's free. Register now while it's still free! Already a member? Close this window and log in. Join Us Close. Join Tek-Tips Forums! Join Us!
By joining you are opting in to receive e-mail. Promoting, selling, recruiting, coursework and thesis posting is forbidden. Students Click Here. Welcome to our community! Can someone explain the difference in the two? I'm not very clear. Is this the same as going over to the security tab? Why would I set permissions in one over the other? Join our community to see this answer! Unlock 2 Answers and 5 Comments. Andrew Hancock - VMware vExpert. See if this solution works for you by signing up for a 7 day free trial.
0コメント