MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

missions. To enable or disable Simple File Sharing, in any open folder, click Tools and
then click Folder Options. In the Folder Options dialog box, on the View tab, in the
Advanced Settings list, select or clear the Use Simple File Sharing (Recommended)
check box.
Note The remainder of this chapter assumes that you are not using Simple File Sharing.
Shared Folder Permissions
When Simple File Sharing is disabled, you can control how users gain access to a
shared folder by assigning shared folder permissions. Shared folder permissions are
simpler than NTFS permissions. Table 9-1 explains what each of the shared folder permissions
allows a user to do, presented from most restrictive to least restrictive.
Table 9-1 Shared Folder Permissions
This Shared Folder
Permission Allows the User to
Read Display folder names, file names, file data, and attributes; run program
files; and change folders within the shared folder
Change Create folders, add files to folders, change data in files, append data to
files, change file attributes, and delete folders and files; also allows the
user to perform actions that are permitted by the Read permission
Full Control Change file permissions, take ownership of files, and perform all tasks
that are permitted by the Change permission
You grant or deny shared folder permissions. Generally, it is best to grant permissions
to a group rather than to individual users. You should deny permissions only when it
is necessary to override permissions that are otherwise applied, for example, when it
is necessary to deny permission to a specific user who belongs to a group to which you
have granted the permission. If you deny a shared folder permission to a user, the user
will not have that permission. For example, to deny all remote access to a shared
folder, deny the Full Control permission.
Requirements for Sharing a Folder
Lesson 1 Introduction to Shared Folders
To create shared folders on a computer running Windows XP Professional, you must
be a member of the Administrators or Power Users groups. Also, users who are granted
the Create Permanent Shared Objects user right are allowed to share folders. You can
share only folders; you cannot share individual files. If you need to provide users network
access to files, you must share the folder that contains the files.
9-3