MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

8-2 Chapter 8 Securing Resources with NTFS Permissions
Lesson 1: Introduction to NTFS Permissions
You use NTFS permissions to specify which users and groups can access files and
folders and what they can do with the contents of the files or folders. NTFS permissions
are available only on NTFS volumes; they are not available on volumes formatted with
file allocation table (FAT) or FAT32 file systems. NTFS security is effective whether a
user accesses the file or folder at the local computer or over the network.
The permissions you assign for folders are different from the permissions you assign for
files. Administrators, the owners of files or folders, and users with Full Control permission
can assign NTFS permissions to users and groups to control access to files and folders.
After this lesson, you will be able to
■ Identify the standard NTFS folder permissions
■ Identify the standard NTFS file permissions
■ Describe how Windows XP Professional uses access control lists (ACLs)
■ Explain how effective permissions are calculated when multiple sets of NTFS permissions
are in effect
■ Explain how permissions inheritance is controlled
Estimated lesson time: 30 minutes
Standard NTFS Folder Permissions
You assign folder permissions to control the access that users have to folders and to the
files and subfolders that are contained within the folders. Table 8-1 lists the standard
NTFS folder permissions that you can assign and the type of access that each provides.
Table 8-1 NTFS Folder Permissions
This NTFS Folder
Permission Allows the User To
Read See files and subfolders in the folder and view folder permissions, and
attributes (such as Read-Only, Hidden, Archive, and System)
Write Create new files and subfolders within the folder, change folder
attributes, and view folder ownership and permissions
List Folder Contents See the names of files and subfolders in the folder
Read & Execute Move through folders to reach other files and folders, even if the users
do not have permission for those folders, and perform actions permitted
by the Read permission and the List Folder Contents permission
Modify Delete the folder plus perform actions permitted by the Write
permission and the Read & Execute permission
Full Control Change permissions, take ownership, and delete subfolders and files;
plus perform actions permitted by all other NTFS folder permissions