O'Reilly logo

Windows Vista Security: Praxisorientierte Sicherheit für Profis by Marcus Nasarek

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Securing Your Data
|
387
NTFS Permissions
While access flags are your only choice for controlling how files or folders are used
with FAT, NTFS allows you to control the way files are used with both access flags
and NTFS permissions. NTFS permissions provide granular control over the way
files and folders are used. When you strip away all the needless stuff you really
shouldn’t worry about, NTFS permissions boil down to these five things:
Basic permissions
Top-level permissions that you can assign to user and group accounts
Special permissions
Low-level permissions that you can assign to user and group accounts
Ownership permissions
Permissions that identify a file or folder’s highest permission holder
Inherited permissions
Permissions that are inherited from the folder in which a file or folder is stored
Effective permissions
Permissions in effect for a particular user or group based on the combination of
all permissions assigned to that user or group
You assign basic permissions and other permissions to the various user and group
accounts available on your computer or on your network. Accounts on your com-
puter include those accounts created by the operating system as well as accounts you’ve
created. Local accounts on your computer are named using the following syntax:
ComputerName\AccountName
This means that if your computer is named DadsComputer and your user account is
Dad, you’ll see the account referenced as DadsComputer\Dad.
Network accounts are named using the following syntax:
DomainName\AccountName
This means that if your workplace domain is TheOffice and your user account is
WilliamS, you’ll see the account referenced as TheOffice\WilliamS.
If you want to manage permissions for multiple users, you will typically do this using
group accounts. Your computer has several standard group accounts, including
Administrators and Users. Any user that is a member of your computer’s Administra-
tors group has administrator access permissions on your computer. Any user that is a
member of your computer’s Users group has user access permissions on your com-
puter. At the office, your network has Administrators and Users groups that apply to
the entire network as well.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required