Windows Small Business Server 2011 : Working with Permissions (part 4) - Assigning NTFS Permissions

2.5 Assigning NTFS Permissions

When you create a new share using the Provision A Shared Folder Wizard, the NTFS Permissions page, shown in Figure 5, provides access to the Permissions dialog box for the folder you intend to share. You can also modify the NTFS permissions for any file or folder using its Properties sheet.

Figure 5. The NTFS Permissions page in the Provision A Shared Folder Wizard.

To assign NTFS permissions to a folder, use the following procedure:

1. Log on to your Windows SBS 2011 server using a domain account with administrative privileges.

2. Open Windows Explorer and browse to the parent folder of the folder you want to manage.

3. Right-click the folder whose NTFS permissions you want to manage and, from the context menu, select Properties. The Properties sheet for the folder appears.

4. Click the Security tab.

5. Click Edit. The Permissions dialog box for the folder appears.

   

6. Click Add. The Select users, computers, service accounts, or groups dialog box appears.

7. In the Enter object names to select text box, type the name of the security principal to which you want to assign permissions and click OK. The security principal appears in the Group or user names list.

   

8. With the security principal you added selected, select the check boxes for the permissions you want to allow or deny. Then click OK.

9. Click OK again to close the Properties sheet.

10. Close Windows Explorer.

2.6 Understanding Resource Ownership

One of the peculiarities of the NTFS permission system is that it is possible to revoke all permissions from all users, leaving no one with the ability to access a particular file or folder. To prevent files and folders from being so orphaned, every NTFS element has an owner. The owner of a file or folder always has the ability to modify the permissions for that file or folder, even if the owner does not possess any permissions himself or herself. By default, the owner of a file or folder is the user who created it. However, any user who possesses the Allow Take Ownership special permission or the Allow Full Control standard permission can assume ownership of a file or folder.