Mike Meyers' CompTIA A+ Chapter 13 Users, Groups, and Permissions

group

* A _________ is a container that holds user accounts and defines the capabilities of its members *an efficient way of managing multiple users * assign a certain level of access for a file or folder

Users

* Members of the _________ group cannot edit the Registry or access critical system files * Can create groups but manage only those they create * Members of this group are also called Standard users.

Local Users and Groups

* help you create, modify, and delete users and groups * Accessed through Computer Management

administrative shares

**Created by default—appear as C$ or ADMIN$ Used so administrators can access everything If deleted, recreated at reboot Cannot change their default permissions Hidden—do not appear when you browse a machine over the network, though you can map them by name

User Account Control (UAC)

*stop unauthorized changes to Windows *enables users to know when they are about to do something that has serious consequences *a pop-up dialog box that seemed to appear every time you tried to do anything

local user account

Every Windows system stores the user accounts as an encrypted database of user names and passwords. Windows calls each record in this database a ________

Change permission

Account with this permission can give or take away permissions for other accounts.

Security policies

All Windows versions have a Local Security Policy utility. Open a command line and run secpol to access. Security policies are organized as containers with subcontainers of preset policies

Administrators

Any account that is a member of the ______________ group has complete _____________ privileges, which grant complete control over a machine

Take Ownership permission

Anyone with the permission can seize control of a file or folder. Administrator accounts have ________ for everything.

Ownership

Creating a new file/folder makes you the owner. Owners can do anything they want to the files or folders they own. Can change permissions to prevent anybody from accessing them, if desired

Folder permissions

Define what a user may do with a folder Example: List folder contents

File permissions

Define what a user may do with an individual file Example: Read and Execute - permission to run an executable program

chown command

Enables you to change owner and group with which a file or folder is associated Syntax: chown <new owner> filename

Power Users group

Existed before Vista to give almost all power of an administrative account

Copying from one NTFS volume to another

Inherits new permissions

Copying within a volume

Inherits new permissions

Moving from one NTFS volume to another

Inherits new permissions

Moving within a volume

Keeps original permissions

Power Users

Members of the ________ group are almost as powerful as Administrators, but they cannot install new devices or access other users' files or folders unless the files or folders specifically provide them access.

Guests

The Guests group enables someone who does not have an account on the system to log on by using a guest account.

Security tab

The top section is a list of users and groups that currently have NTFS permissions to that folder, and the bottom section is a list of NTFS permissions for the currently selected users and groups

chmod command

Used to change permissions Uses numbering system r:4; w:2, x:1

user account

User name and password combination, stored in a database on your computer, that grants the user access to the system

Sharing Resources

Windows 7 *Sharing is simple through Public libraries for documents, music, pictures, and videos. *Open Windows Explorer and click down arrow next to one of the libraries folders. Windows 8/8.1/10 *These Windows versions have the same Libraries as Windows 7, but not visible by default. *To display, right-click on white space on left side of navigation section of File Explorer.Select Show libraries

NTFS permissions

_________ are rulesets, connected to every folder and file in your system, that define exactly what any account or group can or cannot do to the file or folder.

BitLocker Drive Encryption

_____________ encrypts the whole drive, including every user's files, so it's not dependent on any one account

Permission propagation

______________ determines what NTFS permissions are applied to files that are moved or copied into a new folder.

Inheritance

_____________is the process of determining default NTFS permissions for newly introduced files or subfolders. Any new files or folders placed into a folder automatically get all the NTFS permissions of the parent folder.

Encrypting File System (EFS)

an encryption scheme that any user can use to encrypt individual files or folders on a computer *encrypted files is based on that specific installation of Windows

strong password

at least eight characters in length, including letters, numbers, and non-alphanumeric symbols

global user account

functions like a local account but adds the benefit of synchronizing some of your stuff with the global account settings

Sharing Folders and Files

right-click on a file or folder, select Properties, and head over to the Security tab

encryption

scrambling of data

local shares

shares added manually are called _______

Authentication

the process of identifying and granting access to some user, usually a person, who is trying to access a system

Authorization

the process that defines what resources an authenticated user may access and what he or she may do with those resources *NTFS file system defines specific resources the user may access