BY DEFAULT, WHAT INHERITS THE PERMISSIONS THAT YOU ASSIGN TO THE PA...

6. By default, what inherits the permissions that you assign to the parent folder?

Lesson Summary

■

NTFS folder permissions are Read, Write, List Folder Contents, Read & Execute,

Modify, and Full Control.

■

The NTFS file permissions are Read, Write, Read & Execute, Modify, and Full Con-

trol.

■

NTFS stores an ACL, which contains a list of all user accounts and groups that have

been granted access to the file or folder, as well as the type of access that they

have been granted, with every file and folder on an NTFS volume.

■

It is possible for multiple sets of NTFS permissions to apply to a user for a partic-

ular resource. A user’s effective permissions for a resource are the sum of the

NTFS permissions that you assign to the individual user account and to all the

groups to which the user belongs.

■

By default, permissions that you assign to the parent folder are inherited by and

propagated to the subfolders and files contained in the parent folder. However,

you can prevent permissions inheritance.

Lesson 2: Assigning NTFS Permissions and Special

Permissions

You should follow certain guidelines for assigning NTFS permissions. Assign permis-

sions according to group and user needs, which include allowing or preventing per-

missions to be inherited from parent folders to subfolders and files that are contained

in the parent folder.

After this lesson, you will be able to■

Assign or modify NTFS folder and file permissions to user accounts and groups

■

Grant or deny special permissions

■

Take ownership of files and folders

■

Prevent permissions inheritance

■

Identify guidelines for planning NTFS permissions

Estimated lesson time: 70 minutes

How to Assign or Modify Permissions

Administrators, users with the Full Control permission, and owners of files and folders

can assign permissions to user accounts and groups.

To assign or modify NTFS permissions for a file or a folder, in the Security tab of the

Properties dialog box for the file or folder, configure the options that are shown in Fig-

ure 8-3 and described in Table 8-3.

Table 8-3

Security Tab Options

Option Description

Group Or User Names Allows you to select the user account or group for which you want to

change permissions or that you want to remove from the list.

Permissions For group

Allows and denies permissions. Select the Allow check box to allow a

permission. Select the Deny check box to deny a permission.

or user name

Add Opens the Select Users Or Groups dialog box, which you use to

select user accounts and groups to add to the Group Or User Names

list (see Figure 8-4).

Remove Removes the selected user account or group and the associated per-

missions for the file or folder.

Advanced Opens the Advanced Security Settings dialog box for the selected folder

so that you can grant or deny special permissions (see Figure 8-5).