MCTS 70-680: File and folder access

NTFS permissions allow you to control who has access to your files and folders. This video looks at using the basic NTFS permissions, explicit and inherited permissions, the deny permission, copying vs moving files, ownership and what happens when you put users into groups. Deny permissions should be avoided where possible. This video looks at how in most cases you can avoid using the deny permissions in most scenarios.

Basic NTFS Permissions
List folder content Lists files and folders in a folder
Read Allows reading of files and folders
Read & Execute The read permission and application execution
Write Write to files and folders but not delete
Modify Write/Read and delete
Full Control All of the above and the ability to change permissions

Explicit and inherited permissions
Explicit permissions are permissions that are set on a file manually. Inherited permissions are permissions that are obtained or inherited from the folder above it.

Deny permission
Deny permissions override all other permissions. In most cases you can achieve the same effect as the deny permission by simply removing the users access. By using the deny permission you risk locking out other users that may be a member of multiple groups.

Ownership for files
Being the owner of a file or folder allows you to change the NTFS permission at any time regardless of what the NTFS permissions are set to. Administrators have the right to take ownership of a file that they do not have access to.

Moving vs copying files
NTFS permissions will be retained when moving a file or folder from location to the anther location on the same drive. If you don't want this, copy the files or folder and then delete the original. Every other scenario including copying the NTFS permissions will be inherited there permissions from the target folder.

[itfreetraining]

Thanks very much and thanks for watching.

[itfreetraining]

You would need to use advanced permissions to do this. Remove the permission Traverse folder/execute file for everyone expect the user or users that you want to be able to see the folder.

[FaizanKhan-ngwn]

awesome teaching SIR ....
ALLAH bless you ///

[wagsbass]

thank you so much good sir. you got some good stuff on here and so clearly explained

[AJ-xgck]

Thanks a lot!!
the effort you put into your videos is amazing!!

[girlsdancewhiskey]

I unchecked read&execute and modify on system hard drive (windows) for administrators and users and now i can't reverse it. How to fix it?

[nasseralbelbeisi]

How i can hidden folder,
if user don't have permission.
The idea when the user access to server show the specific folder and hidden another Folder.

In example, I have two users (user1, user2) and two folder(folder1, folder2), when user1 access to server, show folder1 and hidden folder2 and when user2 access, show folder2 and hidden folder1.

How I can do this.

[canoncola]

This is fucking excellence. Thumbs up.

[sydneyprab]

Great .... I didn't know it earlier. :)