COPYING AND MOVING FOLDERSIN THIS EXERCISE, YOU SEE THE EFFECTS OF PER...

4. If you do not want a user or group to gain access to a particular folder or file,

should you deny access permissions to that folder or file?

Lesson Summary

When you copy or move files and folders, the permissions you set on the files or

folders might change. When you copy files or folders from one folder to another

or from one volume to another, the object takes on the permissions of the desti-

nation folder. You must have Write permission for the destination folder to copy

files and folders. When you copy a file, you become the creator and owner of the

file.

When you move a file or folder within a single NTFS volume, the file or folder

retains its original permissions. When you move a file or folder between NTFS vol-

umes, the file or folder inherits the permissions of the destination folder.

There are a number of common problems associated with NTFS permissions that

you should learn to troubleshoot. In particular, you should make sure that the per-

missions are configured the way you think they are (particularly if the object has

been moved or copied). Also, if you have recently assigned permissions, a user

must log off and back on for the permissions to become effective.

Case Scenario Exercise

In this exercise, you will read a scenario about applying NTFS permissions to folders

and files, and then answer the questions that follow. If you have difficulty completing

this work, review the material in this chapter before beginning the next chapter. You

can find answers to these questions in the “Questions and Answers” section at the end

of this chapter.

Scenario

You are an administrator working for a company named Fabrikam, Inc., a regional

advertising company with a headquarters office in Memphis, TN, and several branch

locations throughout the Southeast. Members of the company’s Accounting depart-

ment, which is located in the main office, keep accounting information for the com-

pany’s clients on a file server located within the department. On that file server is a

folder named Client Accounts, to which all members of the Accounting department

need access. Due to confidentiality agreements, there are certain documents within the

Client Accounts folder that should be accessible only by employees, not by temporary

or contract workers.

You have configured the Client Accounts folder in the following manner:

You removed the Everyone group entirely.

You added the Users group and assigned that group Full Control.

In addition, you have performed the following actions:

You made all part-time employees members of a group named Part Time.

You made all contract workers members of a group named Contractors.

You assigned the Deny Full Control permission to the Part Time And Contractors

groups for the files that are protected by the confidentiality agreement.

Questions