O'Reilly logo

Windows Vista Security: Praxisorientierte Sicherheit für Profis by Marcus Nasarek

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Sharing Your Data
|
403
6. Password-protected sharing allows you to restrict access so that only people with
a user account and password on your computer can access shared files, shared
printers, and the Public folder. To configure password-protected sharing,
expand the Password Protected Sharing Panel by clicking the related Expand
button (see Figure 11-14). To enable password-protected sharing, select “Turn
on password protected sharing.” To disable password-protected sharing, select
“Turn off password protected sharing.” Click Apply.
7. Media sharing allows you to share your Windows Media Player library. To config-
ure media sharing, expand the Media Sharing Panel by clicking the related Expand
button and then click Change. This displays the Media Sharing dialog box shown
in Figure 11-15. To enable media sharing, select the “Share my media” checkbox.
To disable media sharing, clear the “Share my media” checkbox. Click OK.
For Public folder sharing, printer sharing, and media sharing, turning on sharing is
all you need to do. For file sharing, however, you have more work to do. You must
specify files and folders to share, and configure sharing permissions.
Configuring Standard File Sharing
With standard file sharing, two levels of permissions are used: share permissions and
NTFS permissions. Share permissions define the maximum level of access, and no
one can ever have more permissions than those granted by the share. NTFS permis-
sions set on files and folders further restrict the permitted actions. Table 11-3 lists
the share permissions you can assign.
Figure 11-14. Configuring password-protected sharing
404
|
Chapter 11: Securing and Sharing Your Data
As with NTFS permissions, you can assign share permissions to both users and
groups. If you’ve granted share permissions to a group and a user is a member of that
group, the user also has those permissions. If a user is a member of multiple groups,
the user’s effective share permissions are the highest level assigned. For example, if
someone is a member of Group A, to which you’ve assigned Reader permission, and
Group B, to which you’ve assigned Owner/Co-owner permission, this person’s effec-
tive permissions are those of Owner/Co-owner.
You can override this behavior by specifically denying an access permission. Deny-
ing permission takes precedence and overrides permissions that you’ve granted to
groups. If you don’t want a user or a group to have a permission, configure the share
permissions so that the user or the group is denied that permission. For example, if
you don’t want the user to have Owner/Co-owner permission, deny this permission
to the user’s account.
Figure 11-15. Configuring media sharing
Table 11-3. Share permissions
Permission How it’s used
Owner/Co-owner Grants full access to the shared file or folder. People with this permission can read files,
change files, change file and folder permissions, and take ownership of files and folders.
Contributor Grants permission to read files, create files and subfolders, modify files, change attributes on
files and subfolders, and delete files and subfolders.
Reader Grants permission to view file and subfolder names, read files and file attributes, access the
subfolders of the share, and run program files.
Sharing Your Data
|
405
You can share a file or folder and set the share permissions by completing the follow-
ing steps:
1. In Windows Explorer, right-click the file or folder you want to share and then
select Properties.
2. In the Properties dialog box, select the Sharing tab. As shown in Figure 11-16,
the details on this tab indicate whether the file or folder is shared already.
3. If a file or folder is shared already, note the share path. This is the path you and
others can use to access the folder over the network.
4. If a file or folder is not yet shared, you can share it. Click Share. In the File Shar-
ing dialog box, shown in Figure 11-17, click the selection button (the down
arrow) to the right of the text entry field provided to display a list of accounts
and options.
Figure 11-16. Viewing the sharing status

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required