Supporting Users and Troubleshooting a Windows® XP Operating System Exam Cram™ 2 (Exam 70-27)

................................................

Chapter 2

56

you provide a user account with administrative privileges along with the

appropriate password for that account.

Controlling Access to Shared Folders by

Using Share Permissions

When you create a new share under Windows XP Professional or Windows

Server 2003, the default share permissions are Everyone: Allow Read.

Share permissions determine the level of access to files and folders stored

within the share for remote users accessing the share over the network; local

users accessing local files are not affected by share permissions.

For the highest level of security, use NTFS (file-system) permissions in addi-

tion to share permissions to ensure that local users accessing the files are also

subject to any restrictions you’ve configured. To enable network access, you

must create a share, but you should use NTFS settings because they apply to

both local and network users and because NTFS security provides a wider

variety of permission levels.

Share permissions offer only three levels of security access: Read, Change, or

Full Control. Each permission level can be allowed (Allow check box

marked), implicitly denied (Allow check box cleared), or explicitly denied

(Deny check box marked). The share permissions and their levels of access

are as follows:

➤ Read—This default permission lets users view folder names and file-

names, view data within files, and execute application program files.

➤ Change—This permission allows all Read permissions and also lets users

add folders and files, change data within files, and delete folders and

files.

➤ Full Control—This permission grants the same privileges as the Change

permission for share permission purposes. It also permits users to

change NTFS file-level and folder-level permissions for files and folders

stored on NTFS drives.

Customizing share permissions is optional when creating a shared folder; the

Everyone: Allow Read permission is automatically assigned to all new shares.

You can change the default share permissions for a new share or for an exist-

ing share. To modify share permissions, follow these steps:

1. Right-click the shared folder in Windows Explorer or My Computer

and select Sharing and Security.