Network Implementation and Support Lesson 05 File Access - Eric Vanderburg

1. Network Implementation &
Support
Chapter 5
Managing File Access
Eric Vanderburg © 2006

2. File Systems
• FAT (Up to 4 GB)
• FAT32 (Up to 2 TB)
• NTFS (Up to 2 EB)
– Supports file level security
– Required for AD
– Quotas
Eric Vanderburg © 2006

3. Comparison
File
System
Logical
Drive Size
Sectors per Bytes per
Cluster
Cluster
FAT16
1-128 MB
128-256 MB
256-512 MB
512 MB–1 GB
1-4 GB
4
8
16
32
64
2,048
4,096
8,192
16,384
32,768
FAT32
512 MB-8 GB
8-16 GB
16-32 GB
> 32 GB
8
16
32
64
4,096
8,192
16,384
32,768
NTFS
1-512 MB
512 MB–1 GB
1-2 GB
> 2 GB
1
2
4
8
512
1,024
2,048
4,096
Eric Vanderburg © 2006

4. Shares
• Creating shared folders
• Viewing in Computer Management
• DACL (Discretionary Access Control List)
– List of users and permissions
• ACE (Access Control Entry)
– Individual users or group entries in the DACL
Eric Vanderburg © 2006

5. NTFS Permissions
• Full Control
• Modify (full minus delete subfolders,
change permissions, and ownership)
• Read & Execute (look at attributes &
permissions, traverse folders)
• List Folder Contents
• Read (no traverse)
• Write (create files and folders, change
attributes)
Eric Vanderburg © 2006

6. Special Permissions
•
•
•
•
•
•
•
•
•
•
•
Traverse Folder/Execute File
List Folder/Read Data
Read Attributes
Read Extended Attributes
Create Files/Write Data
Create Folders/Append Data
Write Attributes
Write Extended Attributes
Delete Subfolders & Files
Delete (specific to a file or folder)
Take Ownership
Eric Vanderburg © 2006

7. Folder NTFS Permissions
File NTFS Permissions
Eric Vanderburg © 2006

8. NTFS Permissions
• Add together
• Deny has precedence
• Child folders inherit permissions
• Inheritance can be blocked
• It can also be forced
Eric Vanderburg © 2006

9. Permissions
• Most restrictive between share and
security applies
• Usually share is full control and access is
determined solely by NTFS security
Eric Vanderburg © 2006

10. Acronyms
•
•
•
•
ACE, Access Control Entry
DACL, Discretionary Access Control List
FAT, File Allocation Table
NTFS, New Technology File System
Eric Vanderburg © 2006