Windows 2003 Active Diretory (vi)--folder permissions and sharing (1)

What is a privilege? Permission refers to the user's access restrictions on an object. For example, whether you can create, read, or delete objects.

Permissions for folders and files are divided into the following two types of permissions based on whether they are shared on the network: 1, NTFS permissions: If a folder or file exists on an NTFS disk drive, it has this permission, regardless of whether it is shared or not. 2, share permissions: As long as the shared out of the folder, you must have this permission. If the file has an NTFS disk drive in the folder, both NTFS permissions and share permissions are present. Note: If the file also has access rights and share permissions, then take the "more stringent permissions" as the subject.

Managing NTFS Permissions: First look at several operating principles for NTFS permissions: 1. Each folder and file in the NTFS file system has a special attribute called security descriptor, which has a discretionary ACCESS control List (DACL, commonly referred to as ACLs) is mentioned before. It records what access the user or group account has to the object, but we are editing the ACL's properties when we set the permissions. 2, NTFS permissions to set the way, is "folder or file" as the set object, can not be "user" for the Set object. 3. NTFS Permissions are inherited, so subfolders and files have permissions from the upper folder.

Understanding NTFS Permissions: Two major elements: special access and standard access. Make an analogy to understand. Compare the single point and set menu when ordering. Because the package is only in advance each can be a single point of the combination of dishes, eliminating the problem of choice, if all the packages are not satisfied, it can be a single point of the way to choose dishes. In fact, the standard access rights is to some commonly used special access rights to make up 6 kinds of matching.

To set NTFS permissions: There are two groups "managers" and "supervisors" in the domain. Now set access to the "Product" folder where the "managers" group has full control over the "product" folder, while the "supervisors" group has permission to read and establish files and folders, whereas others have read permissions.

Set Standard access permissions below

Right-click the Product property.