Windows Vista Security: Praxisorientierte Sicherheit für Profis

Sharing Your Data

|

403

6. Password-protected sharing allows you to restrict access so that only people with

a user account and password on your computer can access shared files, shared

printers, and the Public folder. To configure password-protected sharing,

expand the Password Protected Sharing Panel by clicking the related Expand

button (see Figure 11-14). To enable password-protected sharing, select “Turn

on password protected sharing.” To disable password-protected sharing, select

“Turn off password protected sharing.” Click Apply.

7. Media sharing allows you to share your Windows Media Player library. To config-

ure media sharing, expand the Media Sharing Panel by clicking the related Expand

button and then click Change. This displays the Media Sharing dialog box shown

in Figure 11-15. To enable media sharing, select the “Share my media” checkbox.

To disable media sharing, clear the “Share my media” checkbox. Click OK.

For Public folder sharing, printer sharing, and media sharing, turning on sharing is

all you need to do. For file sharing, however, you have more work to do. You must

specify files and folders to share, and configure sharing permissions.

Configuring Standard File Sharing

With standard file sharing, two levels of permissions are used: share permissions and

NTFS permissions. Share permissions define the maximum level of access, and no

one can ever have more permissions than those granted by the share. NTFS permis-

sions set on files and folders further restrict the permitted actions. Table 11-3 lists

the share permissions you can assign.

Figure 11-14. Configuring password-protected sharing

404

|

Chapter 11: Securing and Sharing Your Data

As with NTFS permissions, you can assign share permissions to both users and

groups. If you’ve granted share permissions to a group and a user is a member of that

group, the user also has those permissions. If a user is a member of multiple groups,

the user’s effective share permissions are the highest level assigned. For example, if

someone is a member of Group A, to which you’ve assigned Reader permission, and

Group B, to which you’ve assigned Owner/Co-owner permission, this person’s effec-

tive permissions are those of Owner/Co-owner.

You can override this behavior by specifically denying an access permission. Deny-

ing permission takes precedence and overrides permissions that you’ve granted to

groups. If you don’t want a user or a group to have a permission, configure the share

permissions so that the user or the group is denied that permission. For example, if

you don’t want the user to have Owner/Co-owner permission, deny this permission

to the user’s account.

Figure 11-15. Configuring media sharing

Table 11-3. Share permissions

Permission How it’s used

Owner/Co-owner Grants full access to the shared file or folder. People with this permission can read files,

change files, change file and folder permissions, and take ownership of files and folders.

Contributor Grants permission to read files, create files and subfolders, modify files, change attributes on

files and subfolders, and delete files and subfolders.

Reader Grants permission to view file and subfolder names, read files and file attributes, access the

subfolders of the share, and run program files.

Sharing Your Data

|

405

You can share a file or folder and set the share permissions by completing the follow-

ing steps:

1. In Windows Explorer, right-click the file or folder you want to share and then

select Properties.

2. In the Properties dialog box, select the Sharing tab. As shown in Figure 11-16,

the details on this tab indicate whether the file or folder is shared already.

3. If a file or folder is shared already, note the share path. This is the path you and

others can use to access the folder over the network.

4. If a file or folder is not yet shared, you can share it. Click Share. In the File Shar-

ing dialog box, shown in Figure 11-17, click the selection button (the down

arrow) to the right of the text entry field provided to display a list of accounts

and options.

Figure 11-16. Viewing the sharing status