MCSEGuidetoManagingaMicrosoftWindows……7节.pptVIP

70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment * Determining Effective Permissions Permissions that actually apply to a user can be the result of membership in multiple groups Prior to Windows Server 2003, determining effective permissions was done manually In Windows Server 2003, there is an Effective Permissions tab in Advanced Security Settings dialog box for resource Shows specific permissions for a user or group 70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment * Determining Effective Permissions (continued) 70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment * Combining Shared Folder and NTFS Permissions NTFS permissions can be combined with share permissions When accessing a share across a network, if both apply, use most restrictive When accessing a file locally, only NTFS permissions apply 70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment * Converting a FAT Partition to NTFS For highest security, partitions and volumes should be configured to use NTFS Command-line utility, CONVERT, will convert FAT or FAT32 partitions and volumes to NTFS All existing files and folders are retained CONVERT cannot convert NTFS to FAT or FAT32 70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment * Summary Windows Server 2003 supports 3 file systems FAT FAT32 NTFS (preferred) Two types of permissions Shared folder (network only) Tools are Windows Explorer, Computer Management, and NET SHARE command NTFS (local and network) NTFS partitions only 70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment * Summary (continued) Permissions Shared folders, 3 standard permissions NTFS, 6 standard and 14 special permissions Permissions are cumulative Effective permissions can be determined from Advanced Security Settings of a resource Shared folder and NTFS permissions can be combined CONVERT utility can convert a FAT or FAT32 partition to the NTF