+ Reply to Thread
Results 1 to 9 of 9
  1. Junior Member
    Join Date
    Oct 2012
    Posts
    5
    #1

    Default Please help: file and folder permissions question

    Hello all, I was wondering if any of you would be so kind as to help me with this scenario:

    This case project involves configuring share and NTFS permissions. Dover Leasing is in the process of reviewing their current structure and practices. There has been talk of minor security breaches occurring in which users are able to gain access to information they should not be permitted to view. Management would like you to make some recommendations as to how permissions can be changed on specific folders.

    a.) Two network servers maintain confidential information pertaining to financial data and employee data. Users access the folders both locally and on the network. Only members of the Managers group, Human Resources Group, and Accountants group should have access to these folders. Explain how permissions can be implemented, including a short description of how share permissions and NTFS permissions work together.

    b.) Dover Leasing has recently hired a new server administrator to assist you. He has worked with Windows NT 4.0 in the past and is unfamiliar with Windows Server 2003. Prepare a brief explanation for the new administrator about how to configure Share and NTFS permissions.

    I'm still trying to grasp the whole concept on file and folder permissions. Any help on this would be greatly appreciated! And I will be forever in your debt..
    Reply With Quote Quote  

  2. SS -->
  3. Senior Member
    Join Date
    Apr 2012
    Location
    Philippines
    Posts
    800

    Certifications
    MCSA Win7, MCSA 2003 & 2008, MCS, CCNA, VCP5
    #2
    Basically, you setup share permissions in such a way that anybody can read and modify files on the shares. Then, you implement NTFS permissions using more granular controls. This is done for simplicity and protects confidential files from accessing both locally and over the network.

    The most restrictive set of permissions always wins. You could, of course, restrict access to files using just share permissions, but it won't prevent local users from accessing the files they don't need.
    Reply With Quote Quote  

  4. Junior Member
    Join Date
    Oct 2012
    Posts
    5
    #3
    Thanks sratakhin. So I'm guessing the specific NTFS Permission I would set would be the Deny Permission (on the confidential folders) for anybody who didn't belong to the Managers group, Human Resources Group, or Accountants group correct? That way only those groups would have access to the confidential files and folders.

    Reply With Quote Quote  

  5. Senior Member
    Join Date
    Apr 2012
    Location
    Philippines
    Posts
    800

    Certifications
    MCSA Win7, MCSA 2003 & 2008, MCS, CCNA, VCP5
    #4
    No, you should use the deny permissions very sparingly. If you don't explicitly allow somebody access to a particular resource, they will be denied from accessing it.
    Reply With Quote Quote  

  6. Junior Member
    Join Date
    Oct 2012
    Posts
    5
    #5
    Ok thanks, that makes sense. So if you don't mind me asking, what specific NTFS permissions would you set in this case?
    Reply With Quote Quote  

  7. Senior Member
    Join Date
    Apr 2012
    Location
    Philippines
    Posts
    800

    Certifications
    MCSA Win7, MCSA 2003 & 2008, MCS, CCNA, VCP5
    #6
    I would set the share permissions to allow full access to authenticated users and then use the NTFS permissions to only allow read and modify access to the selected groups.
    Reply With Quote Quote  

  8. Junior Member
    Join Date
    Oct 2012
    Posts
    5
    #7
    Awesome, thanks a million! Anything I can do in return for helping me out?
    Reply With Quote Quote  

  9. Senior Member
    Join Date
    Apr 2012
    Location
    Philippines
    Posts
    800

    Certifications
    MCSA Win7, MCSA 2003 & 2008, MCS, CCNA, VCP5
    #8
    You can give me a rep if you wish
    Feel free to ask questions. I'm taking this exam tomorrow morning and glad to help.
    Reply With Quote Quote  

  10. Junior Member
    Join Date
    Oct 2012
    Posts
    5
    #9
    Sweet, thanks again . But it won't let me give you a rep, odd..
    Good luck on your exam!
    Last edited by mephy; 10-15-2012 at 06:56 PM.
    Reply With Quote Quote  

+ Reply to Thread

Social Networking & Bookmarks