Files and Folders in VS .NET

Making QR Code in VS .NET Files and Folders

6

Hidden share A shared folder can be hidden by appending a $ to its share name. Connections can be made to the share using the share s UNC (for example, \\server01\docs$), but the share will not appear on browse lists. Windows Server 2003 creates hidden administrative shares, such as Admin$, Print$, and a hidden share for the root of each disk volume. Only administrators can connect to the hidden administrative shares. Inheritance By default, permissions assigned to a folder apply to the folder, its subfolders and files. In addition, files and folders are configured by default to allow inheritable permissions from their parent folder or volume to propagate to their ACL. Through these two mechanisms, permissions assigned to a high-level folder are propagated to its contents. Effective permissions Permissions can be allowed or denied, inherited or explicitly assigned. They can be assigned to one or more users, groups, or computers. The effective permissions are the overall permissions that result and determine the actual access for a security principal. Ownership Each NTFS file or folder maintains a property that indicates the security principal that owns the resource. The owner is able to modify the ACL of the object at any time, meaning the owner cannot be locked out of the resource. Ownership can be taken and transferred based on the Take Ownership permis sion and the Restore Files And Directories user right, respectively. The special accounts: Creator Owner, Network, and Interactive These security principals are dynamic, and represent the relationship between a user and a resource. When a user creates a file or folder, they are the Creator Owner of that resource, and any inheritable permissions on the parent folder or volume assigned to Creator Owner will be explicitly assigned to the user on the new object. Network and Interactive represent the connection state of the user whether the user is connected to the resource from a remote client, or is logged on interactively to the computer that is maintaining the resource. Audit Object Access policy This policy, available in the Local Security Policy of a standalone Windows Server 2003 computer, or in Group Policy Objects, determines whether access to files, folders, and printers is registered in the Security log. When this policy is enabled, the Auditing Entries for each object determine the types of activities that are logged. Virtual directory A virtual directory is an IIS object that allows a folder on any local or remote volume to appear as a subfolder of a Web site.

6-55

Page 6-11

1. Which of the following tools allows you to administer a share on a remote server Select all that apply. a. The Shared Folders snap-in. b. Windows Explorer running on the local machine, connected to the remote server s share or hidden drive share. c. Windows Explorer running on the remote machine in a Terminal Services or Remote Desktop session. d. The File Server Management console.

The correct answers are a, c, and d. Windows Explorer can be used only to administer a local share, so you would have to run a remote desktop session to the remote server, and run Windows Explorer in that session to manage that server s shares. A more common, and a better, practice is to use the Shared Folders snap-in, which is included in the File Server Management console.

2. A folder is shared on a FAT32 volume. The Project Managers group is given Allow Full Control permission. The Project Engineers group is given Allow Read permis sion. Julie belongs to the Project Engineers group. She is promoted and is added to the Project Managers group. What are her effective permissions to the folder