CONFIGURING AND MANAGING SHARED FOLDER SECURITY

1
CONFIGURING AND MANAGING SHARED FOLDER SECURITY

• Chapter 8

2
OVERVIEW

• Create and remove shared folders
• Control access to shared folders
• Analyze and troubleshoot combined permissions
• Manage and troubleshoot offline files
• Manage and troubleshoot Web server resources

3
SHARED FOLDERS
4
SHARED FOLDER PERMISSIONS
5
SHARED FOLDER PERMISSIONS (CONTINUED)

• Apply to folders only (not files).
• Do not restrict local access to resources.
• Only permission available for FAT.
• Default permission is Everyone/Read.

6
SHARED FOLDER PERMISSIONS (CONTINUED)
7
PLANNING SHARED FOLDERS

• Consolidate data.
• Assign permissions to folders.
• Assign most restrictive permissions possible.
• Use groups for permission assignment.
• Use intuitive share names.

8
PLANNING SHARED FOLDERS (CONTINUED)

• Multiple permissions.
• Limit use of Deny permission.
• Permissions interact with NTFS permissions.
• Folder no longer shared if moved or renamed.
• Copies of folders are not shared.

9
SHARED FOLDER REQUIREMENTS

• Administrators or Power Users group
• Must have NTFSRead to share folders

10
SHARING FOLDERS

• Create Shared Folder Wizard

11
SHARING FOLDERS (CONTINUED)

• Windows Explorer

12
SHARING FOLDERS (CONTINUED)

• NET SHARE

13
ADMINISTRATIVE SHARES
14
STOP SHARING FOLDERS

• Computer Management choose Stop Sharing from
  shortcut menu
• Windows Explorer select Do Not Share This Folder
• NET SHARE NET SHARE ltsharenamegt /DELETE

15
MULTIPLE SHARES
16
UNC PATHS
17
CONNECTING TO SHARED FOLDERS

• My Network Places
• Mapped drives (Windows Explorer)
• Mapped drives (NET USE)
• Run dialog box

18
COMBINING NTFS AND SHARE PERMISSIONS
19
MONITORING SHARED FOLDERS

• Shared Folder snap-in
• Must be Administrator or Power User
• Monitor connections, open files, and file locks
• Might also disconnect users

20
MONITORING SHARED FOLDERS (CONTINUED)
21
ENABLING OFFLINE FILES (SERVER)
22
ENABLING OFFLINE FILES (CLIENT)
23
CONFIGURING OFFLINE FILES
24
CONFIGURING SYNCHRONIZATION
25
INTERNET FILE SHARING

• Installing Internet Information Services (IIS)
• Internet Management console
• WebDAV and Web folders
• Web folder authentication
• Using Web folders

26
INSTALLING IIS

• Installed from Add/Remove Programs
• Apply Windows Updates

27
INTERNET MANAGEMENT CONSOLE
28
WEB FOLDERS
29
CLIENT CONNECTIONS TO WEB FOLDERS
30
SUMMARY

• Share folders to allow remote usage.
• Share permissions apply only to folders.
• Default share permission is EveryoneRead.
• Replace default share permissions to reduce
  security exposure.
• Administrators and Power Users can share folders.
• NTFS and share permissions can be combined.

31
SUMMARY (CONTINUED)

• Offline files must be enabled before use.
• Synchronization Manager synchronizes offline
  files.
• IIS and WebDAV allow Internet file sharing.
• WebDAV clients can use Web folders.