MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

Manage Users That Are Connected to Shared Folders
9-13
To view the users that are connected to the server, expand the Shared Folders node in
Computer Management and then select the Sessions folder. Occasionally, you might
need to disconnect users from the computer so that you can perform maintenance
tasks on hardware or software. To disconnect users from the server, do one of the following:
■ To disconnect a single user, right-click the user name in the Sessions folder, and
then select the Close Session option from the action menu.
■ To disconnect all users from the server, right-click the Sessions folder, and then
select the Disconnect All Sessions option from the action menu.
To view users that have shared files and folders open, under Shared Files, select the
Open Files option. The details pane displays the files and folders that are currently in
use on the server. This information is valuable if you are trying to work with a shared
folder or file and need to know who is currently accessing the resource so that you can
ask that person to disconnect.
Guidelines for Shared Folder Permissions
Lesson 1 Introduction to Shared Folders
The following list provides some general guidelines for managing your shared folders
and assigning shared folder permissions:
■ Determine which groups need access to each resource and the level of access that
they require. Document the groups and their permissions for each resource.
■ Assign permissions to groups instead of user accounts to simplify access administration.
■ Assign to a resource the most restrictive permissions that still allow users to perform
required tasks. This practice is known as the principle of least privilege.
For example, if users only need to read information in a folder and they will never
delete or create files, assign the Read permission.
■ Organize resources so that folders with the same security requirements are located
within a folder. For example, if users require Read permission for several application
folders, store those folders within the same folder. Then share this folder
instead of sharing each individual application folder.
■ Use intuitive share names so that users can easily recognize and locate resources.
For example, for the Application folder, use Apps for the share name. You should
also use share names that all client operating systems can use.
Table 9-5 describes share and folder naming conventions for different client computer
operating systems.