This video demonstrates how to configure NTFS permissions on files and folders. This is demonstrated in Windows 10, but NTFS permissions work the same way on Windows Server.
@@ddaltonyvcc Ok, so I'm trying to add my dads laptop as a user so I can give it access to my windowsimagebackup folder on my networked external hard drive. But when I type in the name of his computer, it can't find it, even though it already has access to the drive itself, or the volume.
Is there a way to put everything back to their default settings? I may have inadvertently messed this up in win10 and found that the os kept saying the recycle bin was corrupted..... I really shouldn't mess with things I don't fully understand. :(
Thank you so much for the creare explanation. Let's say that I want to give read permission only to George while giving every other user the modify permission. Do i need to use the deny?
No. I tend to avoid using the default users groups. They have some basic permissions that I don't always want to use because it sometimes create access that I don't want. I would suggest creating a group for everyone except George and giving that group modify permissions. Then I would create a group for George (or you could assign the permissions directly to him) and give that read permissions. An alternative would be to create a group for everyone except George and grand them modify permissions while leaving the default Users group (which George would be a part of) with the default read permissions.
Great video. Just would like to ask. When you restricted George by removing the inheritance, could the other users access the special access folder ? they dont have inherited permissions on this
Question about the GeneralAccess folder. While anyone can read and write inside that folder, how do you prevent anyone from deleting the GeneralAccess folder itself? If I have 3 local users: Admin, User1, and User2. How can I set that User1 and User2 can read/write on GeneralAccess folder while only Admin can delete that folder?
@@ddaltonyvcc i've tried this but ended up having user1 and user2 unable to delete or rename files inside that folder. maybe I've done it wrong. what I wanted is to have both user able to read and write files and folders, rename files and folders inside GeneralAccess but prevent both of them to delete GeneralAccess itself.
@@profkwl775 In that case, when you remove the permissions you will need to specify that the limitation is only for that one folder and not for anything underneath it. Look for a scope setting.
that's the part where DENY is useful, you choose the user or the group of users, then choose DENY then check DELETE and only applies the scope of THIS folder, so the regular users cannot delete de folder itself but can do whatever they want inside of the folder...
Great video, David. Any idea on why object whose owner is 'Guest' is not getting permissions from its parent folder?(inheritance is enabled btw) Thanks.
@@ddaltonyvcc Thank you for your reply. Is there any workaround to this issue because whenever I transfer file from other pc on my network, that file gets 'Guest' as their owner? Now when I put that file in shared folder again it doesn't get folders permissions.
@@ddaltonyvcc I am on a simple home network with couple of Windows PCs, all of them are in a workgroup. NTFS file system is used. Password protected sharing is turned off. I clean installed Windows on two computers to test sharing of files, still the same, when file gets transferred, its owner becomes: 'Guest'.
@@juzer2354Okay, being on a home network changes things quite a bit. You don't have centralized authentication like you would on a domain. Do you have accounts on each computer for each potential user on the network?
Standard permissions are groupings of special permissions. You can view the extended permissions as well, although most of the time basic permissions will work. If you use a group of extended permissions that do not fit into the standard basic permissions, it will show up as special permissions.