Source : My Blogspot MCITP-SAEA.Blogspot.com
I) What is NTFS Permission :
As you can see : "NTFS" is one of the formats of hard disk drive, just like FAT, exFAT ... and nowaday, most of hard disk computers (Desktop & Laptop) use NTFS format.
NTFS Permission help us give different permissions to different users on the same file or folder .
Comparion between Share Permission and NTFS Permission :
Permission on Folder yes yes
Permission on File no yes
Affect a user by logging through yes yes
Affect a user by logging directly no yes
Number of permission 3 (Full, Change, Read) 19 permissions
Try this : Right click on File or Foler > Properties> Security tab
1/ 6 standard Permissions :
- List Folder Content : You can access shared folder, see what's in it .
- Read : For example : read the text file . But cannot execute any program .
- Read & Execute : Read + Execute program .
- Write : change, create new but cannot delete data .
(note : Write is indepent permission with Read - write can change a file by console without "read" it)
- Modify = Read + Write + Delete
- Full Control : do anything to this file or folder : read, write, delete ...and especially : be able to change the permission of this folder .
2/ 13 special Permissions :
- More detail & complex permissions, to serve administration's need .
- For example : give user A the right to delete his own folder he created before but he cannot delete other folder belongs to user B .
- Creator Owner : is a group, when user A create a folder or file, he belongs to this group and he has the right to fully control his Data he created before.
3/ Inheritance permission :
In folder A we have folder B, so if user1 has some permissions on folderA => He will have the same permissions on folder B .
We can remove this inheritance by doing this :
Right click on folder A > Properties> Security > Advanced => change permissions : un-check a option "include inheritable ..." , click Add to keep inheritable table .
4/ Relationship between NTFS permission and Share Permission :
When user A accesses folder X through the network from other computer. His rights are under 2 effects, one from NTFS, and the other from Share . His rights now are "mutual permission"
NTFS Share User's Right
modify read read
write read NO right (remember write & read are separated permission)
full control change change/modify
R or M or F Full Control R or M or F
(R/M/F : Read/Modify/Full Control)
We don't want both permissions : Share & NTFS mix up with each other. So set Share Permission to everyone : Full Control. And don't worry, we have NTFS Permission to handle security problem .
(*This post is marked as partially completed - there are some info I will supplement later, now I'm kinda busy for life, LOL, let's move on to the next post *)