Manage File System Security

Introduction

Welcome to the Manage File System Security Practice Lab. In this module, you will be provided with the instructions and devices needed to develop your hands-on skills.

Learning Outcomes

In this module, you will complete the following exercise:

Exercise 1. Manage Share and NTFS Permissions

After completing this lab, you will be able to:

• Create folders and configure share permissions
• Manage NTFS permissions
• Verify permissions

Exam Objectives

The following exam objectives are covered in this lab:

• 3.2 Compare and contrast components of an operating system.
• 6.4 Compare and contrast authentication, authorization, accounting, and non-repudiation concepts.

Lab Duration

It will take approximately 45 minutes to complete this lab.

Exercise 1 - Manage Share and NTFS Permissions

When a folder is shared in a Windows computer, it means that the folder, including its subfolders and files, is accessible to users in a network. The default share permission grants the “Everyone” special group with “Allow Read”. To fine-tune share permissions, the Domain Users security group gets Full Control as this group refers to Active Directory users. The “Everyone” group is removed from the share permissions list to secure the shared folder.

“Administrative shares” such as root drives C$, D$, the operating system directory “admin$”, and inter-process communication IPC$ are other shared folders accessible to members of the computer’s Administrators security group. The operating system disallows the modification of the administrative shares as these provide convenience for administrator access.

To enhance file system security, Windows automatically assigns NTFS permissions to folders, including all subfolders and files. Folders and files inherit the permissions from the parent drive; the permissions are customizable to comply with the file security requirements of an organization.

To learn more about managing share and NTFS permissions, please refer to your course material or use your favorite search engine to research for more information about this topic.

Learning Outcomes

After completing this exercise, you will be able to:

• Create folders and configure share permissions
• Manage NTFS permissions
• Verify permissions