NTFS Permissions (MCP Series)

NTFS Permissions are different from share permissions. NTFS permissions provide more control over permissions, and override share permissions.

NTFS Permissions can be broken down into two categories:
  • NTFS File Permissions
  • NTFS Folder Permissions
NTFS File Permissions

NTFS File Permissions allow a user to set permissions for a file. Permissions allowed are:
  • Full Control
  • Modify
  • Read
  • Read & Execute
  • Write
NTFS File Permissions are cumulative with the exception of deny permissions. If you assign Read permissions to a user and Write permissions to a group that user is a member of, they will have both Read and Write permissions. If you were to deny permissions to Read a file, under no circumstances (even if they are assigned Read permissions elsewhere) would they be able to Read that file.

NTFS Folder Permissions

NTFS Folder Permissions are used to assign permissions to a folder and all files and folders within that folder. Like File Permissions, Folder Permissions can be assigned to a user or group. Permissions available to assign to a NTFS Folder are:
  • Full Control
  • Modify
  • Read
  • Read & Execute
  • Write
  • List Folder Contents
Copying and Moving Files and Folders

When you copy or move a file or folder, some permissions will be inherited. It is important to know what permissions will be inherited, and what permissions will not. There is a very simple rule to remember that will make this easy. The rule is:
If a new file is created instead of simply moving the existing file then the permissions will not be inherited.
That's it, pretty simple really.

Popular posts from this blog

Get local computer UUID/GUID using Windows Powershell

Use the following syntax to get the local computer's UUID/GUID using Windows Powershell: get-wmiobject Win32_ComputerSystemProduct  | Select-Object -ExpandProperty UUID Add -computername after the WMI class to find a remote computer's UUID, example: get-wmiobject Win32_ComputerSystemProduct -computername RANTPC | Select-Object -ExpandProperty UUID
Read more

gPLink and gPOptions

gPLink is a property for sites, domains and organisational units that contains a prioritised list of GPOs linked to the node. gPOptions is a property that contains all Block Policy Inheritance settings for the node. To manage GPO links on a node, you must have read and write access to the gPLink and gPOptions properties.
Read more

PSLoggedOn Getting Started on Windows Server 2008 R2

Image
PSLoggedOn is a tool I downloaded to allow me to find out which computers a user is currently logged on to. Getting it up and running wasn’t exactly easy. I’m running a Windows Server 2008 R2 test environment. The first error I encountered was: Error browing network: The list of servers for this workgroup is not currently available. Note: I kept the spelling mistake from the error message to make it easier to find via search engines. To get past this error, you have to enable and start the “Computer Browser” service. Then I started getting the error telling me that the Administrator is not logged on. That’s simply not true because I am logged onto another server (Name: ELARA): I turned the firewall OFF OFF OFF (It is a test network after all). I enabled Network Discovery and to do that I went on a service starting frenzy: DNS Client, Function Discovery Resource Publication, SSDP Discovery, and UPnP Device Host, Computer Browser After all that, I ran the script against the se
Read more