Lesson 8
Deny permission NTFS
Always override other permissions that have been granted, including one of user or group has been given full control
Group Policy apply policy to removable media
Extends the disc quarter policies in this folder to NTFS file system volumes or other removable media
OneDrive
A file hosting service that allows you to store and create files and folders and share them with other users and groups
HomeGroup
A group of computers on a home network that can share files and printers
OneDrive for
Access to all available SharePoint permissions
Effective permission
Actual permissions when logging in and accessing a file or folder when when a user is member of several groups with several sets of explicit permissions for a particular folder or file
Edit One Direction
Add edit and delete list view add update and delete list items and document
Traverse folder / execute file special permission
Allows or prevents user or group to move through folders to reach other files or folders or allows user or group to run program files
Disk quotas
Allows you to limit the amount of storage space you allocate to your users only works on NTFS volumes.
Print Spooler
An executable file that manages the printing process which includes retrieving the location of the correct print driver loading the driver creating the individual print jobs and scheduling the print jobs for printing
OneDrive for business
Based on SharePoint. Allows team members to use it to store and work on documents with others. Can also help ensure that your users business files are stored in a central location
Limited access
Browse to a site page or library to access a specific content item when users or groups do not have permissions to open or edit any other items in the site or Library
Storage sense
Built-in Windows 10 tool that allows you to get an overview of the types of files that are taking up space on the hard disks
NTFS inherited permissions
Conditions that are granted to a folder parent object or container that flow into child objects such as sub folders or files inside the pants holster
Program files folder
Containment programs that are not part of Windows on a 64-bit version of Windows it contain 64-bit programs
Windows / syswow64
Contains 32 bit binary files required for compatibility on 64-bit windows
Users folder
Contains individual folders for each user who has logged onto the computer. It stores the desktop documents start menu and favorites
Windows / system 32
Contains many of the Windows system programs
Design One Direction for mission
Craigslist in document libraries edit pages and apply themes borders and style sheets on the side
Manage hierarchy
Create sites and edit Pages list items and Liz documents
Group Policy enforced disk quota limit
Determines whether disk quota limits are enforced and prevents the user from changing the setting
Group Policy log event quota warning level is exceeded
Determines whether the system records an event in the application log when uses reach their disk quota warning limit
Contribute OneDrive permission
Do you add update and delete list items and documents
Public folder
Easy and convenient way to share files on your computer. Any file or folder you put in a public folders automatically shared with the people who have access to a public folders
Approve
Edit and approve Pages list items and list document
Change share permission
Enables users / group to add files and subfolders to the shared folder, change data and files, delete sub folders and files, and change any permission associated with Reed
Full control share permission
Enables users / group to change file permissions (NTFS only), take ownership of files (NTFS only), and perform tasks associated with change / read
Read share permission
Enables users / group to view file and sub folder names, the data and files, and run programs
NTFS permissions
Enables you to control access to your files and folders whether they are accessed across the network or by someone logging into the computer locally. This differs from share permissions as share permissions only control permissions when sharing a folder. We share permissions if you're accessing locally the permissions setup do not apply.
Explicit vs inherited
Explicit permissions take precedence over inherited permissions
Read OneDrive permission
Few pages in items and existing listen document libraries & demo.
Take ownership special permission
File or folder, allows or prevents taking ownership of the file or folder. As an owner you can change permissions regardless of permissions that you are explicated granted to the file or folder
Read permissions special permission
File or folder, allows or prevents you to view the permissions of the file or folder
Change permissions special permission
File or folder, it allows our prevents the user or group to change the permissions of a file or folder
Delete special permission
Files and folders, allows or prevents the deleting the file or folder
Read extended attributes special permission
Files and folders, allows or prevents the viewing of extended attributes of a file or folder. Extended attributes are defined by programs and may vary by program
Read attributes special permission
Files and folders, allows or prevents the viewing of file or folder attributes, such as read-only and hidden
Write attributes special permission
Files or folders, allows or prevents the changing the attributes of files or folders, such as read-only or hidden
Write extended attributes special permission
Files or folders, allows or prevents the changing the extended attributes of a file or folder
Delete sub folders and files special permission
Files or folders, allows the user or groups to delete sub folders and files
List folder / read data special permission
Folder, allows or prevents the user group to see list of files and subfolders in the folder. File, you can open and read the file
Create folders / append data special permission
Folder, allows you to create subfolders within the folder. File, allows the user or group to add data to the end of the file but not to change, delete, or overwrite existing data
Write NTFS
Folder, enables users / group to create files and folders. File, enables users / group to create a file
Read and execute NTFS
Folder, enables users / group to read the contents of the folder and execute programs in the folder. File, enables users / group to read the contents of the file and execute the program
List folder contents nTFS
Folder, enables users / group to view a list of files in the selected folder user is not allowed to read the contents of a file or execute a file. File, there is no equivalent permission for files.
Create files / write data special permission
Holder, allows or prevents a user or group to create new files within a folder. File, allows the user or group to add to or modify the file, including overriding existing content.
Full control NTFS
Holder, enables users / group to add, change, move, and delete items. User can also add and remove permissions on the folder and its subfolders. File , enables users / group to change, move, delete, and manage permissions. User can also add, change, and remove permissions on the file
Modify NTFS
Holder, enables users / group to read and write permissions. User can't delete files within the folder and Mewtwo contents of subfolders. File, enables users / group to read and write permissions. User can modify the contents of the file
Windows folder
Holds the Windows operating system
PrinT job
I file or set of files that have been sent to a printer
Everyone vs anonymous
In Windows 10 the everyone group does not include the anonymous log on Group by default, so permissions applied to the everyone group do not affect the anonymous log on Group
Setting up NTFS / share permissions on file / folders to be shared
It is best to set the share permissions to provide full control to the appropriate user group and then use NTFS permissions to further lock down access to the resource
Program files x86
Loads x86 last 32-bit programs on a 64-bit version of Windows
Printer
Logical printer which provides a software interface between the print device and the applications
You only
New pages items and documents
Steps to configure disc quota
One, enable quarters on the volume. Two, configure the quota settings. 3, create quota entries for specific users.
Hierarchy of Precedence of permission
One. Explicit deny. two. Explicit allow. three. Inherited deny. four. Inherited allow
NTFS folder permissions inherit
Permissions for the contents within a folder are inherited by folders within but not by files.
NTFS explicit permissions
Permissions granted directly to a file or folder
Checked, cleared, shaded
Permissions of a file or folder appear like this. Checked means explicitly a sign cleared means no permission is signed. Shaded means permissions are granted through inheritance from a parent hold
Prince device
Physical printer
Compression
Process of decreasing the size of files or folders without affecting the files
Read NTFS
Solder, enables users / group to read the contents of the folder. File, enables users / group to read the contents of the file
Group Policy specify default quota limit and warning level
Specifies the default disk quota limit and warning level for all new users as soon as they write to the volume. Does not affect current users
Windows / logs
Stores a wide range of law
Windows / winsxs
Stores all versions of components including dll's so that the system upgrades and rollbacks are more reliable. As you install more updates the folder grows quite large
System volume information
Stores information and restore points is a system folder and is used by the system restore tool
Windows / CSC
Stores offline files
Windows / temp
Stores temporary files
Ports used when sharing printers
TCP ports 139 and 445, UDP ports 137 and 138
Group Policy log event when quote limit is exceeded
This setting determines whether they're the system recordes an event in the local application log when users reach their disk quota limit
OneDrive free?
To 1 gigabyte comes with Office 365
Group Policy enable disk quotas
Turns on disk quota Management on all NTFS volumes of the computer and users cannot turn it off
Program data folder
Used by applications to store data for standard users because it does not require elevated permissions
Window/fonts
Used to add fonts you typically use an installed program or use the fonts aplets and control panel
Restricted Reed
View pages and documents but not historical versions or use it for
Library
Virtual folder that can display content from different locations on your computer or an external drive
Quotas and new users
When you enable disk quotas for a volume, they apply only to new users who have not placed data on the volume. If existing users already have files / folders on the volume, you have to add them as new quOta entries
Share permissions inherited?
Windows does not include share permissions as part of the effective permissions
Group Policy disk quota
You can use Group Policy to manage disk quota on selected computers at the site, domain, or organizational unit level.
Fetching
You can use one drive to connect your remote computer locate the file and then upload it to your wonderspace
Encrypting and compressing
You cannot encrypt files or folders that are compressed and you cannot compress a file that is encrypted using EFS
Universal naming convention UNC
\\Server name\sharename