Windows System Permissions Issues

Recently in the work, often because of a variety of system access issues, and encountered a lot of permissions problems. So the system to understand the permissions of Windows system issues, is also very good, easy to solve some configuration problems.

DOS and Winnt the difference between the permissions

DOS is a single task, single user operating system. But can we say that DOS does not have permissions? When we open a computer with a DOS operating system, we have the admin rights of the operating system, and the permissions are everywhere. Therefore, we can only say that DOS does not support the setting of permissions, can not say that it does not have permissions. As people's awareness of security increased, permission settings were born with the release of NTFS.

In WindowsNT, users are divided into groups, groups and groups have different permissions, of course, a group of users and users can also have different permissions. Now let's talk about the common user groups in NT.

Administrators, the Administrators group, by default, users in Administrators have unrestricted full access to the computer/domain. The default permissions assigned to this group allow full control of the entire system. Therefore, only trusted people can become members of the group.

PowerUsers, the Advanced user group, Power users can perform any operating system tasks other than those reserved for the Administrators group. The default permissions assigned to the PowerUsers group allow members of the Power Users group to modify the settings for the entire computer. However, Power Users do not have the right to add themselves to the Administrators group. In permission settings, the permissions of this group are second to administrators.

Users: Normal user group, the user of this group cannot make intentional or unintentional changes. As a result, users can run validated applications, but they cannot run most legacy applications. The Users group is the safest group because the default permissions assigned to the group do not allow members to modify the operating system settings or user data. The Users Group provides an environment in which the most secure programs run. On NTFS-formatted volumes, the default security setting is designed to prevent members of this group from compromising the integrity of the operating system and installed programs. Users cannot modify system registry settings, operating system files, or program files. Users can shut down the workstation, but not the server. Users can create local groups, but can only modify local groups that they create.

Guests: Guest group, by default, guests have equal access to members of the regular users, but the Guest account has more restrictions.

Everyone: As the name implies, all users, all users on this computer belong to this group.

In fact, there is a group is also very common, it has the same as administrators, even higher than the permissions, but this group does not allow any user to join, in view of the user group, it will not be displayed, it is the system group. The permissions required for system and system-level services to function properly are vested in it. Since this group has only one user system, it may be more appropriate to classify the group as a user.

Finally, the run as administrator is often used. You need to continue to get to know some of the previous groupings, and then you should go deep into the details. Let's talk about it first.