Network Implementation and Support Lesson 05 File Access - Eric Vanderburg
This document discusses file systems and permissions for network file sharing. It begins by describing common file systems like FAT, FAT32, and NTFS, noting features such as supported file sizes and security capabilities. Tables then compare the logical drive sizes, sectors per cluster, and bytes per cluster supported by different file systems. The document proceeds to cover creating shared folders, viewing shares, and the discretionary access control list (DACL) and access control entries (ACE) that define user permissions. It details the specific NTFS permissions and how they can be combined, overridden, inherited, and blocked. The document concludes by noting that share permissions and security permissions both factor in access, with security typically determining access. Key acrony
Network Implementation and Support Lesson 05 File Access - Eric Vanderburg
- 1. Network Implementation & Support Chapter 5 Managing File Access Eric Vanderburg © 2006
- 2. File Systems • FAT (Up to 4 GB) • FAT32 (Up to 2 TB) • NTFS (Up to 2 EB) – Supports file level security – Required for AD – Quotas Eric Vanderburg © 2006
- 3. Comparison File System Logical Drive Size Sectors per Bytes per Cluster Cluster FAT16 1-128 MB 128-256 MB 256-512 MB 512 MB–1 GB 1-4 GB 4 8 16 32 64 2,048 4,096 8,192 16,384 32,768 FAT32 512 MB-8 GB 8-16 GB 16-32 GB > 32 GB 8 16 32 64 4,096 8,192 16,384 32,768 NTFS 1-512 MB 512 MB–1 GB 1-2 GB > 2 GB 1 2 4 8 512 1,024 2,048 4,096 Eric Vanderburg © 2006
- 4. Shares • Creating shared folders • Viewing in Computer Management • DACL (Discretionary Access Control List) – List of users and permissions • ACE (Access Control Entry) – Individual users or group entries in the DACL Eric Vanderburg © 2006
- 5. NTFS Permissions • Full Control • Modify (full minus delete subfolders, change permissions, and ownership) • Read & Execute (look at attributes & permissions, traverse folders) • List Folder Contents • Read (no traverse) • Write (create files and folders, change attributes) Eric Vanderburg © 2006
- 6. Special Permissions • • • • • • • • • • • Traverse Folder/Execute File List Folder/Read Data Read Attributes Read Extended Attributes Create Files/Write Data Create Folders/Append Data Write Attributes Write Extended Attributes Delete Subfolders & Files Delete (specific to a file or folder) Take Ownership Eric Vanderburg © 2006
- 7. Folder NTFS Permissions File NTFS Permissions Eric Vanderburg © 2006
- 8. NTFS Permissions • Add together • Deny has precedence • Child folders inherit permissions • Inheritance can be blocked • It can also be forced Eric Vanderburg © 2006
- 9. Permissions • Most restrictive between share and security applies • Usually share is full control and access is determined solely by NTFS security Eric Vanderburg © 2006
- 10. Acronyms • • • • ACE, Access Control Entry DACL, Discretionary Access Control List FAT, File Allocation Table NTFS, New Technology File System Eric Vanderburg © 2006