INTRODUCTION TO NTFS PERMISSIONSYOU USE NTFS PERMISSIONS TO SPECIFY WHICH USERS AND GROUPS CAN ACCESS FILES ANDFOLDERS AND WHAT THEY CAN DO WITH THE CONTENTS OF THE FILES OR FOLDERS

8-1

Lesson 1: Introduction to NTFS Permissions

You use NTFS permissions to specify which users and groups can access files and

folders and what they can do with the contents of the files or folders. NTFS permissions

are available only on NTFS volumes; they are not available on volumes formatted with

file allocation table (FAT) or FAT32 file systems. NTFS security is effective whether a

user accesses the file or folder at the local computer or over the network.

The permissions you assign for folders are different from the permissions you assign for

files. Administrators, the owners of files or folders, and users with Full Control permission

can assign NTFS permissions to users and groups to control access to files and folders.

After this lesson, you will be able to■

Identify the standard NTFS folder permissions

■

Identify the standard NTFS file permissions

■

Describe how Windows XP Professional uses access control lists (ACLs)

■

Explain how effective permissions are calculated when multiple sets of NTFS permis-

sions are in effect

■

Explain how permissions inheritance is controlled

Estimated lesson time: 30 minutes

Standard NTFS Folder Permissions

You assign folder permissions to control the access that users have to folders and to the

files and subfolders that are contained within the folders. Table 8-1 lists the standard

NTFS folder permissions that you can assign and the type of access that each provides.

Table 8-1

NTFS Folder Permissions

This NTFS Folder

Permission Allows the User To

Read See files and subfolders in the folder and view folder permissions, and

attributes (such as Read-Only, Hidden, Archive, and System)

Write Create new files and subfolders within the folder, change folder

attributes, and view folder ownership and permissions

List Folder Contents See the names of files and subfolders in the folder

Read & Execute Move through folders to reach other files and folders, even if the users

do not have permission for those folders, and perform actions permit-

ted by the Read permission and the List Folder Contents permission

Modify Delete the folder plus perform actions permitted by the Write

permission and the Read & Execute permission

Full Control Change permissions, take ownership, and delete subfolders and files;

plus perform actions permitted by all other NTFS folder permissions