6.3 Shares
This section covers the following 70-410 exam objective:
201 Configure file and share access.
Read
Access share
Change
Access share, add change, or delete content
Advanced sharing file
Advanced file sharing gives you more control over sharing than you have in the File Sharing Wizard. Advanced file sharing: • Allows a custom name for the share. • Add $ to hide the share • Roots of a computer will be shared out and accessible to Administrators by typing the drive letter and a $ sign (for example, C$). • Administrators can create hidden shares and assign permissions to specified users. • Allows multiple share names with different share permissions. • This is not recommended. • By default, everyone has the read share permission. • Allows offline files. Use the Caching button to set up offline files. • The default permission for folders shared using Advanced Sharing is Read.
Full control
Change, plus the ability to modify share permissions
The following table lists advanced share permissions:
Read Change Full control
Simple sharing file
Simple file sharing uses the name of the folder as the share name: • Folder names should be short. • Folder names should contain no spaces. • When the simple files sharing wizard completes, it provides the Universal Naming Convention (UNC) name for the share. • The UNC form is \\SERVER\SHARE.
The following table describes the two types of file sharing:
Simple sharing file Advanced sharing file
This section covers the following Windows Server Pro: Install and Configure exam objective:
• 5.0 File and Print Services. • Share Folders and Configure Share Permissions • Share Folders • Manage Shared Folders • Manage Share Caching • Configure Share Permissions
• Effective permissions to shared folders are the more restrictive of either share or NTFS permissions. A user's effective permissions cannot be greater than the share permissions assigned to the user or a group to which the user belongs. For this reason, a common strategy for assigning permissions is to:
• Assign Full Control share permissions to Everyone. • Use NTFS permissions to control access. • Whenever possible, assign permissions to groups rather than users. • Add only necessary groups and assign only the necessary permissions. • Do not create nested shares. Even though Everyone has share permissions, only the users or groups with NTFS permissions will have access.
After finishing this section, you should be able to complete the following tasks:
• Configure and manage shared files and folders. • Restrict share access through share permissions and user limits. Enable and disable share caching.
This objective may include but is not limited to:
• Create and configure shares • Configure share permissions • Configure NTFS permissions • Create and configure Work Folders
Share permissions work together with NTFS permissions to control access. Be aware of the following when managing share access:
• Share permissions are in effect only when files are accessed through the network share. If files are accessed locally, share permissions will not control access. • NTFS permissions restrict access to both local and network users. • Both share and NTFS permissions must be configured for a user to access the share. If a user is allowed share access, but no NTFS permissions are set for the user or a group to which the user belongs, no access is allowed.
Share permissions are cumulative:
• The most permissive permission will apply. • Deny overrides Allow permissions.
As you study this section, answer the following questions:
• What tools are available to create and manage shares? • What is the effect of appending $ to a share name? • What permissions do you need to share a folder or configure share permissions? • What is the difference between the read permission and the change permission? • What is the recommended strategy for assigning permissions to a share to provide the required effective permissions? • What are the differences and similarities between NTFS permissions and share permissions?
