I) What is NTFS Permission :

As you can see : "NTFS" is one of the formats of hard disk drive, just like FAT, exFAT ...  and nowaday, most of hard disk computers (Desktop & Laptop) use  NTFS format.
NTFS Permission help us give different permissions to different users on the same file or folder .

Comparion between Share Permission and NTFS Permission :

                                                   Share                                           NTFS

  • Permission on Folder                       yes                                   yes
  • Permission on File                            no                                   yes
  • Affect a user by logging through      yes                                    yes
  • other computer
  • Affect a user by logging directly       no                                     yes
  • Number of permission         3 (Full, Change, Read)          19 permissions

Try this : Right click on File or Foler > Properties> Security tab

1/ 6 standard Permissions :

 - List Folder Content : You can access shared folder, see what's in it .
 - Read : For example : read the text file . But cannot execute any program .
 - Read & Execute : Read + Execute program .
 - Write : change, create new but cannot delete data .
(note : Write is indepent permission with Read - write can change a file by console without "read" it)
 - Modify  = Read + Write + Delete
 - Full Control : do anything to this file or folder : read, write, delete ...and especially : be able to change the permission of this folder .

2/ 13 special Permissions : 

- More detail & complex  permissions, to serve administration's need .
- For example : give user A the right to delete his own folder he created before but he cannot delete other folder belongs to user B .
- Creator Owner : is a group, when user A create a folder or file, he belongs to this group and he has the right to fully control his Data he created before.

3/ Inheritance permission :

In folder A we have folder B, so if user1 has some permissions on folderA => He will have the same permissions on folder B .

We can remove this inheritance by doing this :

Right click on folder A > Properties> Security > Advanced => change permissions : un-check a option "include inheritable ..." , click Add to keep inheritable table .

4/ Relationship between NTFS permission and Share Permission :

When user A  accesses folder X through the network from other computer. His rights are under 2 effects, one from NTFS, and the other from Share . His rights now are "mutual permission"

NTFS                  Share                           User's Right

modify                read                                  read
write               read               NO right (remember write & read are separated permission)
full control          change                          change/modify

R or M or F          Full Control                     R or M or F               

(R/M/F : Read/Modify/Full Control)

We don't want both permissions : Share & NTFS mix up with each other. So set Share Permission to everyone : Full ControlAnd don't worry, we have NTFS Permission to handle security problem .

(*This post is marked as partially completed - there  are some info I will  supplement later, now I'm kinda busy for life, LOL, let's move on to the next post *)


Post a Comment