Chapter 2
you provide a user account with administrative privileges along with the
appropriate password for that account.
Controlling Access to Shared Folders by
Using Share Permissions
When you create a new share under Windows XP Professional or Windows
Server 2003, the default share permissions are Everyone: Allow Read.
Share permissions determine the level of access to files and folders stored
within the share for remote users accessing the share over the network; local
users accessing local files are not affected by share permissions.
For the highest level of security, use NTFS (file-system) permissions in addi-
tion to share permissions to ensure that local users accessing the files are also
subject to any restrictions you’ve configured. To enable network access, you
must create a share, but you should use NTFS settings because they apply to
both local and network users and because NTFS security provides a wider
variety of permission levels.
Share permissions offer only three levels of security access: Read, Change, or
Full Control. Each permission level can be allowed (Allow check box
marked), implicitly denied (Allow check box cleared), or explicitly denied
(Deny check box marked). The share permissions and their levels of access
are as follows:
Read—This default permission lets users view folder names and file-
names, view data within files, and execute application program files.
Change—This permission allows all Read permissions and also lets users
add folders and files, change data within files, and delete folders and
Full Control—This permission grants the same privileges as the Change
permission for share permission purposes. It also permits users to
change NTFS file-level and folder-level permissions for files and folders
stored on NTFS drives.
Customizing share permissions is optional when creating a shared folder; the
Everyone: Allow Read permission is automatically assigned to all new shares.
You can change the default share permissions for a new share or for an exist-
ing share. To modify share permissions, follow these steps:
1. Right-click the shared folder in Windows Explorer or My Computer
and select Sharing and Security.

Get Supporting Users and Troubleshooting a Windows® XP Operating System Exam Cram™ 2 (Exam 70-27) now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.