Information Technology Reference
In-Depth Information
Unfortunately, this axiom can be at odds with another general rule: Keep it simple. Sometimes
determining the least amount of access a user requires can lead to complex permission schemes.
The more complex a permission scheme is, the more likely it will need troubleshooting, and the
more troubleshooting that's needed, the more likely an administrator will assign overly permis-
sive permissions out of frustration.
Because FAT volumes don't have permissions, everybody who logs on
locally to a computer with a FAT volume has full access to all files on that
volume. If a folder is shared on a FAT volume, network users' access is
determined solely by share permissions.
Share Permissions
Share permissions apply to folders and files accessed across the network. Before a file can be
accessed across the network, it must reside in a shared folder or a subfolder of a shared folder.
Share permissions are configured on a shared folder and apply to all files and subfolders of the
shared folder. These permissions can't be configured on individual files; NTFS permissions are
used for that purpose.
There are three share permissions levels (see Figure 6-8):
Read —Users can view contents of files, copy files, run applications and script files, open
folders and subfolders, and view file attributes.
Change —All permissions granted by Read, plus create files and folders, change contents
and attributes of files and folders, and delete files and folders.
Full Control —All permissions granted by Change, plus change file and folder permissions
as well as take ownership of files and folders. (File and folder permissions and ownership
are available only on NTFS volumes.)
Figure 6-8
The Share Permissions tab
Windows assigns default permissions depending on how a folder is shared. (Several methods
for sharing files are discussed later in “Windows File Sharing.”) Generally, the default share per-
mission is Read for the Everyone special identity. On FAT volumes, share permissions are the
 
Search WWH ::




Custom Search