CertiGuide to A+ (A+ 4 Real)  9  Chapter 1: What are Operating Systems and How Do They Work?       9  File Attributes            9  NTFS File Permissions

Adding Permissions 1 Object Access Auditing

NTFS 5 supports a number of advanced permissions, which change depending on the object in question. To access them, click the “Advanced” button on the Security tab. A new window appears in which a slightly different view of the current permissions is displayed.

Clicking on one of the permission entries and clicking the “View/Edit” button displays the full list of granular permissions available for this object.

As you can see, there are many permissions to choose from! Most of the time the basic permissions will be sufficient; however, it is essential to be aware of the existence of the extended permissions.

NTFS permissions and share permissions are cumulative, with the most restrictive combination in force. For example, if the C:\Test folder is shared with Everyone granted Read and Write permissions on the share, but with Everyone denied Read and Write at the NTFS permissions level, the effective permissions will be Everyone denied Read and Write access.

When viewing the advanced properties of a folder, one further option is available: “Reset permissions on all child objects and enable propagation of inheritable permissions”. This option is available as a checkbox at the bottom of the Permissions tab in the advanced security dialog. Selecting this option and clicking “Apply” causes all permissions to be removed and the “Allow inheritable permissions…” check box to be ticked on all subfolders and files. This is a useful way to set folder permissions to a known state. Be careful when using it though, as it is very easy to wipe out large amounts of carefully configured permissions with a single mouse click.

Adding Permissions 1 Object Access Auditing