1. 1 Module 5 Securing Network Resources with Shared Folder Permissions

2. 2  Overview Introduction to Sharing Folders Shared Folder Permissions Guidelines for Sharing Folders Sharing Folders and Assigning Permissions Accessing Shared Folders Best Practices

3. 3 Introduction to Shared Folders Permission to Use a Resource Is Assigned to a User or Group Everyone User1 User2 User3 User4 User1 User2 User3 User4 A Shared Folder Data PermissionsPermissions Server Shared Folders Data User

4. 4  Shared Folder Permissions Full Control Change Read No Access

5. 5 How User and Group Permissions Are Applied + + + Public + + + BB User1 AA NA R R FC Everyone User2 Sales User2 User1

6. 6 Examples of Applied Permissions User1 Group1 User1 Group1 User1 No Access No Access Group2 User1 Group2 User1 Group4 User1 Group4 User1 Read Group3 User1 Group3 User1 Change Folder-BFolder-B 2211 Folder-A Folder-A Group1 User1 Group1 User1 Group2 User1 Group2 User1 Group3 User1 Group3 User1 Group4 User1 Group4 User1 Read Change Full Control Full Control

7. 7  Guidelines for Sharing Folders Use Intuitive Share Names Use Names Readable by All Clients Organize Disk Resources According to Security Needs

8. 8 Examples of Shared Folders CC BB Apps App1 App2 Apps SW SW 1 SW 2 App1 App2 Apps SW 1 SW 2 App1 App2 SW AA

9. 9 Determine Which Groups Need Access to a Resource Assign Permissions to Groups Instead of Users Assign the Most Restrictive Permissions Remove Default Permissions for a New Shared Folder Guidelines for Assigning Permissions

10. 10 Guidelines for Network Application Folders Create a Common Folder for Applications Assign Full Control to the Administrators Group Assign Full Control to Groups That Upgrade and Troubleshoot Assign Read to the Domain Users Group Microsoft App 1 Apps

11. 11 Guidelines for Data Folders Web Sites Directions Training Review Domain Users Public FC Public Data Accountants Sales Managers Data Administrators Sales Managers Accountants FC FC FC FC Working Data

12. 12 Guidelines for Home Folders User1 User2 User3 \Users SharedShared SharedShared User1 User2 Create a Home Folder for Each User In \Users Share Each Home Folder Assign Only the Respective User Full Control On a Network Server Create a Folder Named \Users Do Not Share the \Users Folder 11 22 33 44 55

13. 13  Sharing Folders GroupGroup Operating System Requirements Administrators Any computer running Windows NT Server Operators Windows NT Server Domain Controllers only Power Users Windows NT Server Member servers and Windows NT Workstation computers only Windows NT Server Member servers and Windows NT Workstation computers only ShareSharePurposePurpose C$, D$, E$ The root of each volume on a hard disk is automatically shared The root of each volume on a hard disk is automatically shared Admin $ The C:\Winnt folder is shared as Admin$ Using the Adminstrative Shares Requirements for Sharing a Folder

14. 14 Sharing a Folder (C:) Properties GeneralTools OKCancelApply Not Shared Share Name: Comment: Maximum Allowed AllowUsers Apps Application files Shared As: User Limit: Permissions... Remove Share New Share... Sharing RequiredRequired

15. 15 Assigning Share Permissions Access Through Share Permissions Apps Access Through Share: Owner: Name: Type of Access: CancelAdd...OKRemoveHelp Domain UsersRead AdministratorsFull Control Read Add Users and Groups Names: List Names From: Account OperatorsMembers can administer domain user an AdministratorsMembers can fully administer the comput Backup OperatorsMembers can bypass file security to bac CancelOKHelp Domain AdminsDesignated administrators for the domain Domain GuestsAll domains guests EveryoneAll Users GuestsUsers granted guest access to the comp Type of Access: Show Users Add Members... Search... Add Names: NTSADOM2* Read DomainsDomains

16. 16 Modifying Shared Folders Changing Shared Folder Options Stop Sharing Folders Modifying Share Names Modifying Shared Folder Permissions

17. 17 Accessing Shared Folders Map Network Drive Reconnect at Logon Drive: Path: Connect As: E: Cancel OK Help \\Server\ShareName Open: Run in Separate Memory Space CancelOKBrowse... Type the name of a program, folder, or document, and Windows will open it for you. Run \\Server\Sharedfolder

18. 18 Best Practices Organize Disk Resources to Simplify Administration Store Data Separately from Operating Systems and Applications Remove the Everyone Group from the Permissions List Limit the Number of Users Who Can Connect to a Share Assign Permissions to Groups Rather Than Individual Users Create Shortcuts for Frequently Used Shared Folders

19. 19 Review Introduction to Sharing Folders Shared Folder Permissions Guidelines for Sharing Folders Sharing Folders and Assigning Permissions Accessing a Shared Folder Best Practices