Term
| Describe NTFS permissions |
|
Definition
| Are only available on NTFS partitions; control who can access a resource and what they can do to it; for example, Read, Write, Modify, Full Control |
|
|
Term
| They are only available on _______ partitions and volumes. |
|
Definition
|
|
Term
NTFS permissions can be assigned to both ________ and _____.
Do the folders have to be shared? |
|
Definition
|
|
Term
|
Definition
| ACL (access control list); contains a list of all users and groups that have been granted access to the file/folder as well as the type of access they have been assigned |
|
|
Term
NTFS permissions protect resources when the user is logged on ______ and
________. |
|
Definition
-locally
-remotely over the network |
|
|
Term
| Can you assign different NTFS permissions to folders and files in the same parent folder? |
|
Definition
|
|
Term
| (Explicit/Inherited) NTFS ______ permissions override NTFS _______ permissions. |
|
Definition
|
|
Term
| What are the 5 standard NTFS file/folder permissions? |
|
Definition
| Read, Write, Read & Execute, Modify, Full Control |
|
|
Term
| What is the one standard NTFS folder permission? |
|
Definition
|
|
Term
| ______ NTFS permissions are preset combinations of ______ permissions. |
|
Definition
|
|
Term
| 10. By default, when a folder or file is created, it______ inherit the NTFS permissions of the parent folder. |
|
Definition
|
|
Term
| To assign NTFS permissions, you either ____ or ____ the permission |
|
Definition
|
|
Term
| How are effective permissions calculated when multiple NTFS permissions have been allowed via group membership? |
|
Definition
| A user’s effective permission for a resource is the best/combination of all the NTFS permissions that have been assigned to the user account (directly) and to all the groups to which the user belongs. |
|
|
Term
| ( Allowed / Denied ) permissions override other assigned permissions. |
|
Definition
|
|
Term
| What is indicated when a permission checkmark is shaded gray? |
|
Definition
| When a checkbox is selected and shaded gray, this indicates that the permission has been inherited from a parent folder. |
|
|
Term
| Describe the Apply To option in an NTFS ACL. |
|
Definition
| Allows you to change this default inheritance of This folder, subfolders and files, to any different combination of the three; for ex. Users - Special applies to Subfolders only |
|
|
Term
| How do you prevent permissions from being inherited from the parent folder? |
|
Definition
| in security settings, UNcheck Include inheritable permissions from this object’s parent |
|
|
Term
| Describe the Effective Permissions tab. |
|
Definition
| The Effective Permissions tab (in the Advanced Security Settings window) can be used to help determine the effective permissions for a security principal. |
|
|
Term
| What permissions are not taken into consideration? |
|
Definition
| This does not take into account share permissions and/or permissions granted to some Special Identities |
|
|
Term
On an NTFS volume, what are the NTFS permissions when a folder or file is moved to a new location on the same volume?
…copied on the same volume?
…moved or copied to a different volume? |
|
Definition
-it keeps the original permissions
-it inherits the permissions of the new destination folder
-it inherits the permissions of the new destination folder |
|
|
Term
To provide users with network access to data and applications, the folder containing those resources must
be ______. |
|
Definition
|
|
Term
| Share permissions can only be assigned to |
|
Definition
| shared folders (=folders that have been shared)__. |
|
|
Term
| Can individual files be shared? |
|
Definition
|
|
Term
| List some typical shared folders |
|
Definition
| Windows Explorer, use the NET SHARE command, or the Shared Folders snap-in within the Computer Management console |
|
|
Term
Do share permissions protect the resource when a user is connected to a share via the network?
When the user is logged on locally? |
|
Definition
|
|
Term
| What is the default share permission? |
|
Definition
|
|
Term
| In Computer, how can you visually tell if a folder has been shared? |
|
Definition
| 2 people in bottom left corner of folder icon |
|
|
Term
| What are the 3 share permissions? |
|
Definition
| Read, Change, Full Control |
|
|
Term
| Can you execute files with the Read share permission? |
|
Definition
|
|
Term
| What does the $ at the end of a share name do? |
|
Definition
| hides it/makes it unlisted |
|
|
Term
| Can you connect to a hidden share? How? |
|
Definition
-YES
-you cannot browse for it, it must be typed in manually |
|
|
Term
| Describe the sharing option Limit the number of simultaneous users. |
|
Definition
| Enter to the number of simultaneous connections that can connect to this shared folder at the same time |
|
|
Term
| What does Caching allow a user to do? |
|
Definition
| If you allow caching of a shared folder, the contents will be copied to a local “cache” on the users hard drive so that the files and folders can be accessed even when the users computer is not connected to the network then synchronized when they are connected. (usually for laptops/mobile computers) |
|
|
Term
| If you right-click on a folder in Windows Explorer and select Share, what 3 sharing roles can be configured? List the equivalent Share permissions for the 3 roles. |
|
Definition
| Reader = Read, Contributor = Change, Co-owner = Full Control |
|
|
Term
What should you be careful about if you are using this method to set share permissions?
They are only available to ______. |
|
Definition
the root of every drive, special system folder like c:\windows; examples: C$, D$, ADMIN$
-administrators |
|
|
Term
| Describe Public Folder Sharing |
|
Definition
There is a new type of sharing in Server 2008 called Public Folder Sharing which allows the INTERACTIVE user (the user logged in locally at a server) access to any files placed in the server’s C:\Users\Public folder.
-This folder can also be shared to give all network Users the ability to access |
|
|
Term
| Who has access to the Public folder by default? |
|
Definition
| the INTERACTIVE user (= user logged on locally) |
|
|
Term
| Is Public Folder Sharing turned ON by default? |
|
Definition
|
|
Term
| What does the NET SHARE command list? |
|
Definition
| The NET SHARE command (issued at a Command Prompt) will list, create, manage and delete the shared folders on your computer. |
|
|
Term
| What console and snap-in can be used to monitor current network usage of a shared resource? |
|
Definition
| Shared Folders snap-in the Computer Management console |
|
|
Term
Describe publishing a shared folder in Active Directory.
What is the benefit? |
|
Definition
| Publishing shared folders in Active Directory does not actually store the shared files in the AD database, but it does create a shared folder object that points to the location of the share allowing users to search for it in AD using the same tools that are used to locate users and other AD objects. |
|
|
Term
| What are the 4 ways discussed in class to connect to a shared folder? |
|
Definition
Network (browser)
> Start > Run (browser)
Map Network Drive
NET USE |
|
|
Term
| What is the drive letter used for? |
|
Definition
| like a shortcut that points to the remote shared folder; it acts like a drive |
|
|
Term
| What is the UNC standard syntax? |
|
Definition
|
|
Term
| Can the share name be different than the folder name? |
|
Definition
|
|
Term
When using the Map Network Drive utility, describe the following:
-Drive |
|
Definition
Enter a drive letter that will be your “shortcut” to this network connection.
-You can use any letter that is not currently being used (as a physical drive/partition in your computer or as a shortcut to a different share).
-When you assign a drive letter to a connection, the drive letter will be listed as a drive in Computer and can be selected from within applications (for example, when opening a file using >File >Open). |
|
|
Term
|
Definition
| Enter the UNC address of the shared folder. The UNC (universal naming convention) address: \\servername\sharename |
|
|
Term
| -Connect Using a Different Username |
|
Definition
| If you would like to connect to this share using a different user name than is currently logged in locally at your computer. |
|
|
Term
|
Definition
| Select if you’d like to connect to this shared folder each time you logon. |
|
|
Term
| What is the syntax of the NET USE command (to map a network drive)? |
|
Definition
| NET USE X: \\servername\sharename (where X: is the drive letter you wish to use for this connection) |
|
|
Term
| What is the easiest and recommended way to configure the combination of share and NTFS permissions? (Which permissions should you configure as desired/ Which permissions should you set to Everyone – Full Control?) |
|
Definition
The easiest way to configure permissions for a shared folder on an NTFS volume is to:
-Set the share permission to: Everyone – Full Control
-Configure the desired permissions within the NTFS ACL |
|
|
Term
| When combining share and NTFS permissions, the ______ effective permission of the two becomes the effective permission, when accessed via the network. |
|
Definition
|
|
Term
| List the 4 steps to calculating effective permissions. |
|
Definition
-Steps to Determine Effective Permissions
1- Take the best share permission
2- Take the combination/best NTFS permission
3- If the resource is being accessed via the network (connected to a shared folder), the effective permission is the worst (most restrictive) of the 2 effective permissions calculated in Steps 1 & 2.
4- If the resource is being accessed while logged in locally, the effective permission is the effective NTFS permission (calculated in Step 2) |
|
|
