Outcome 3: Implement secure network administration procedures

Table of Contents

1. Windows Server 2003 Security Features
2. NTFS File and Folder Permissions
   1. Multiple NTFS permissions
   2. Cumulative NTFS permissions
   3. Effective NTFS Permissions
   4. Effective Permissions
   5. Setting NTFS Permissions
   6. NTFS Permissions Inheritance
   7. NTFS Special Access Permissions
   8. Changing Permissions
   9. Taking Ownership
   10. Changing the Owner of a File or Folder
   11. Copying and Moving Files and Folders
   12. Troubleshooting NTFS Permissions
   13. Security Configuration and Analysis
3. Software Update Infrastructure
4. Network Protocol Security
5. Self Assessment Questions (SAQs)
6. Summary: Implementing secure network administration procedures
7. Summary: Software Update infrastructure

Effective Permissions

The effective permissions shown on the previous page are only estimated permissions based on the specified user logging on to this system. The user could access this file or folder through a share, proxy server, or other method and that would change the actual permissions. Also, once the user logs into the system, local policies or group memberships could affect the effective permissions the user has to the file/folder you are inquiring about. Always remember that effective permissions are estimated permissions, not actual permissions.

Effective permissions are the combination of folder and file permissions. The most restrictive permission prevails. For example, if a user has the Everyone group full control and a file read permission, the effective permission is read. However, if the user is a member of several groups that have full, read, and read/execute permissions, the least restrictive permission applies, in this case Full Permission.

Next: Setting NTFS Permissions