Changes

Jump to: navigation, search
no edit summary
== Ownership of Files and Folders ==
The owner of a file or folder is the user who has complete and full control over that file or folder in terms of being able to grant access to the resource, and also allow other users to take over the ownership of a file or folder. This is often, but not always, the creator of the file or folder and is governed by the location of where the file or folder is first created. Typically, the creator of the file or folder is, by default, initially designated as the owner. Ownership of a file or folder may be taken by either an administrator, any user with ''Take ownership'' permission on the object in question or any user with the right to ''Restore Files and Directories'' which by default includes members of the ''Backup Operators'' group.
== Taking and Transferring Windows Server 2008 File and Folder Ownership ==
Another part of understanding file and folder permissions involves the concept of inheritance. When a file or sub-folder is created in an existing folder (referred to as the ''parent folder'') it inherits, by default, all of the permissions of the parent folder. Similarly, when the permissions on a parent folder are changed, those changes are automatically inherited by all ''child'' files and folders contained within that parent folder.
To turn off inheritance for a child file or folder, right click the object in Windows Explorer, select ''Properties'' and then click on the ''Security'' tab of the properties dialog. On the Security properties panel, click on the ''Advanced'' button to display the ''Advanced Security Settings'' dialog, followed by ''Edit...'' to display the editable permission settings. In this dialog, unset the check box next to '''Include inheritable permissions from parent object'''. Once selected, a warning dialog will appear providing the choice to retain the current inherited permissions, or to remove any inherited permissions keeping only permissions which have been explicitly set on the selected object:
</table>
To change the basic permission on a file or folder access the security panel of the properties dialog as outlined above and click ''Edit'' to display an editable version of the current settings. To change permissions for users or groups already configured, simply select the desired user or group from the list and change the settings in the permissions list as required (keeping in mind that any grayed out permissions are inherited from the parent folder). Click ''Apply'' to commit the changes.
To configure permissions for users or groups not already listed, click on the ''Edit...'' button on the security properties panel and click on ''Add...''. Enter the names of users or groups separated by semi-colons (;) in the ''Select Users or Groups'' dialog box and then click on ''Check names'' to verify the names exist. Click on ''OK'' to confirm the user or group and return to the editing dialog. With the new user or group selected, configure the desired permissions and then ''Apply'' the settings when completed.
</tr>
<tr bgcolor="#e9e9e6">
<td>List folder / read data</td><td>Travserse Traverse folder option provides permission to view file and folder names. Read data allows contents of files to be viewed.</td>
</tr>
<tr>
</tr>
<tr bgcolor="#e9e9e6">
<td>Create folders / append data</td><td>Create folders option allows creation of sub-folders in current folder. Append data allows data to be appended to an existing file (file may not be overwritten)</td>
</tr>
<tr>
</tr>
<tr bgcolor="#e9e9e6">
<td>Delete</td><td>Allows a file or folder to be deleted. When deleting a folder, the user or group must have permission to delete any sub-folders or files contained therein.</td>
</tr>
<tr>
== Effective File and Folder Permissions ==
With all the different permission options provided by NTFS on Windows Server 2008, it can be difficult to determine how permissions may accumulate to affect a particular user or group for any given file or folder. In order to make this task a little easier, Windows provides a feature known as ''Effective Permissions'' which will list the cumulative permissions for a user or group. To access this feature, right click on the required file or folder in Windows Explorer, select ''Properties'' and then select the ''Security'' tab in the resulting properties dialog. Within the security panel, click on ''Advanced'' and select the ''Effective Permissions'' tab in the ''Advanced Security Settings'' dialog. The next step is to specify the user or group for which the effective permissions are to be calculated. To achieve this, click on the ''Select'' button and use the ''Select User or Group'' dialog to specify or search for a particular user or group and then click on ''OK''. The effective permissions for the the chosen user or group will subsequently be displayed, as illustrated below:
[[Image:windows_server_2008_effective_permissions.jpg|Displaying the effective permissions of a file or folder]]

Navigation menu