1. Shares and Permissions

2. Basic concepts  Levels of control (permissions) share-level permissions directory-level permissions file-level permissions  Tools to create shares Explorer Server Manager Command line (console)  Windows can only share directories, not files.

3. Local and remote  Local: use Explorer open Explorer, right-click on directory and access object dialog object select sharing and you will see the sharing properties dialog.sharing properties Give a name to the share (12 or 8 digits) and fill in comment with a share description.  Remote: use Server Manager (Active Directory after NT) Start, Programs, Administrative tools, Server Manager (only in NT Server not WS) and You will see this screen.screen Select Computer, Shared Directories and you will be placed in the Shared Directories dialog. Note that all root of hard drive partitions and CD-ROM are shared as administrative shares.Shared Directories Select the button new share and you will see the remote sharing properties dialog, proceed as in local. remote sharing properties

4. Share-level permissions  Press the permissions button. You will see the share-level permissions dialog. There are many types of permissions: Read, Write, Modify, Read and Execute, List Files and Full Control.share-level permissions Full list of permissions: ACL - Access Control List. Multiple group membership “adds up” permissions. Adding to ACL: select Add and you will be placed in the select users or groups dialog. If you know the user or group name enter it.select users or groups If you don’t, click on Advanced and in the select users or groups, common queries dialog, click on Find Now and select from the list.common queries

5. Home Directory and Ownership  Home directory: user directory in the network. Create (or use) a USERS directory and set share-level permission: full control to all users in the machine. Use $. full control to all users Create an individual sub-directory in USERS for each user and set directory-level permission: full control just for the individual user. See the result.result.  Ownership concept: a directory/file owner is a user that can always modify permissions, no matter the entries in the ACL. Allows users to grant permissions to others, administrators to retake ownership.