File System Permissions

Introduction

Welcome to the File System Permissions Practice Lab. In this module, you will be provided with the instructions and devices needed to develop your hands-on skills

Learning Outcomes

In this module, you will complete the following exercises:

• Exercise 1 - Understand Shared Folders and NTFS Permissions
• Exercise 2 - Manage File Permissions

After completing this lab, you will be able to:

• Configure shared folder permissions
• Understand how file system permissions are evaluated
• Understand inheritance
• Understand what happens when moving or copying files
• Configure basic and advanced permissions
• Take ownership of files

Exam Objectives

The following exam objectives are covered in this lab:

• Understand permissions - File system permissions; share permissions; enable or disable inheritance; behavior when moving or copying files within the same disk or another disk; multiple groups with different permissions; basic and advanced permissions; take ownership

Lab Duration

It will take approximately 30 minutes of this lab.

Exercise 1 - Understand Shared Folders and NTFS Permissions

Windows operating system use share permissions to advertise the availability of resources like folders and printers to users in a Windows network. This applies whether a Windows server is in a workgroup or a domain environment.

In a Windows Active Directory domain, members of the Domain Admins or Server Operators group gives a user the capability to create shared folders. For non-domain joined Windows computers, membership in Administrators or Power Users group, grants a user the ability to create shared folders.

To further secure a server’s file system, administrators must configure NTFS security by assigning groups with the relevant permissions to folders that they must access over a network.

In this exercise, you will use different methods to configure share permissions using Windows Server 2012 R2 and Windows 10 computers.

Learning Outcomes

After completing this exercise, you will be able to:

• Configure shared folder permissions
• Understand how file system permissions are evaluated
• Understand inheritance

Exercise 2 - Manage File Permissions

It is essential that shared folder permissions and NTFS security be configured first to secure the server’s file system. From here on, files and folders can be accessed by domain network users from their workstations.

When a user connects to a shared folder, a user’s effective permission also called “effective access.” A user’s effective access is evaluated based on the rule: when shared folder and NTFS permissions combine the most restrictive permission will apply.

Learning Outcomes

After completing this exercise, you will be able to:

• Understand what happens when moving or copying files
• Configure basic and advanced permissions
• Take ownership of files