Windows 2000 Administration in a Nutshell

Name

NTFS permissions

Synopsis

Assign standard permissions, assign special permissions, and modify permissions on a file or folder.

Procedures

NTFS permissions (also called file and folder permissions) are the primary means for controlling access to file resources on Windows 2000-based file servers. To assign or modify NTFS permissions on a file or folder, you must either:

• Be the owner (creator) of the file or folder

• Have Full Control permission on the file or folder

• Be a member of the Administrators group

To assign NTFS permissions, you can use Windows Explorer, My Computer, or the Search Results of the Search Assistant (accessed through Start → Search → For Files or Folders) to find the file or folder you want to control access to. The following procedures assume you have already selected the file or folder whose permissions you want to assign or modify.

Assign Standard Permissions to a File

Right-click on file → Properties → Security → Add → select domain → select user or group → Add → OK → allow or deny standard permissions → Apply or OK

Unless you allow or deny different permissions, when you assign NTFS standard file permissions to a user or group, the default permissions assigned are:

Allow Read & Execute

Allow Read

You can select more than one user or group at a time in the “Select Users, Computers, or Groups” dialog box.

When you try to allow or deny different combinations of NTFS standard permissions, you will discover that not all combinations are allowed. For example, if you try ...