CREATE AN ADDITIONAL SHARE NAME FOR A FOLDER

9-19Lesson 1 Introduction to Shared Folders■

After sharing a folder, control access to that folder by assigning shared folder per-

missions.

■

You can create multiple share names for a single folder and assign different per-

missions to each share name.

■

For existing shared folders, you can stop sharing the folder, modify the share

name, and modify shared folder permissions.

■

You can connect to a shared folder by using My Network Places, My Computer, or

the Run dialog box.

■

Windows XP Professional automatically shares folders for administrative purposes.

These shares are marked with a dollar sign ($), which hides them from users who

browse the computer.

■

You can use Computer Management to view, create, and modify shared folders, as

well as to view users that are connected to each share. You can also use Computer

Management to remotely manage shared folders on other computers.

■

You should practice the principle of least privilege when assigning shared folder

permissions by allowing users only the access they need to do their job. You

should grant permissions to groups rather than users. You should also try to

arrange folders so that resources with the same security requirements are grouped.

Lesson 2: Combining Shared Folder Permissions and NTFS

Permissions

You share folders to provide network users with access to resources. If you are using

a FAT volume, the shared folder permissions are the only resource available to provide

security for the folders that you have shared and the folders and files they contain. If

you are using an NTFS volume, you can assign NTFS permissions to individual users

and groups to better control access to the files and subfolders in the shared folders.

When you combine shared folder permissions and NTFS permissions, the more restric-

tive permission is always the overriding permission.

After this lesson, you will be able to■

Calculate effective permissions for folders that have shared folder and NTFS permis-

sions

■

Explain the rules when combining shared folder permissions and NTFS permissions

■

Combine shared folder permissions and NTFS permissions

Estimated lesson time: 15 minutes

How to Calculate Effective Permissions for Folders That Have Shared

Folder and NTFS Permissions

When users connect to shared folders that are located on NTFS volumes, share permis-

sions and NTFS permissions will combine to control the actions that a user can per-

form. Determining effective permissions can be somewhat difficult when both NTFS

and shared permissions are involved.

Calculating effective permissions for resources within a shared folder on an NTFS par-

tition is a three-step process.