Introduction to File and Share Permissions in Windows Server 2012

Подписаться 1,1 млн

Просмотров 489 тыс.

50% 1

Info
Level: Intermediate
Presenter: Eli the Computer Guy
Date Created: April 17, 2013
Length of Class: 35:11
Research Assistance:
Tracks
Windows Server 2012
Prerequisites
Comfortably be able to use Windows Server 2012 and Windows 8.
Be able to create Users and Groups on Windows Server 2012
Purpose of Class
This class teaches students about the basic concepts of File and NTFS Permissions in a Windows Server 2012 Environment.
Class Notes
Permissions and Security are different things
Permissions allow Users, or Groups access to Resources such as Files, Folders and Printers
It is best to assign Permissions to Groups and not to Individual Users
Share and NTFS Permissions are different
Share Permissions only matter when Resources are being accessed over the network. If a User is Local the Permissions are ignored.
NTFS Permissions are used whether Resources are access over the Network or Locally.
Over the Network is there are both Share and NTFS permissions set on a Resource then the Most Restrictive Permission is the one that will be applied.
In General it is best to set Share Permissions to a resource to Everyone with Full Control, and then use NTFS Permissions to grant or restrict access.
Share Permissions allow you to access Resource through UNC (Universal naming Convention) \\SERVERNAME\SHARE
The FAT, FAT 16 and FAT 32 file systems used in Windows 95 and 98 could only use Share Permissions.
Inheritance means that Permissions set to parent Folders will be inherited by Child Resources
Log in and Out for New Permissions to be applied
By Default Creators of Resources are the Owners.
Resource Owners can set permissions to Resources.
Corrections
Lab Setup Used in Demonstration
The ETCG Host Computer Specs are:
ASUS Model: CM6870US01
16 GB of RAM
1 TB 7200 RPM Hard Drive
i7 3.4 GHz Intel Processor
Windows Server 2012 Machine
Virtual Machine
AD, DNS and DHCP have been setup
Domain ETCG.com has been created
Created 2 Users and 2 Groups
Networking Configuration in VirtualBox = Internal
Windows 8 Machine
Virtual Machine
Already a member of the Domain (Etcg.com)
Networking Configuration in VirtualBox = Internal
Resources

Опубликовано:

15 окт 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 333

@tatooo1900 11 лет назад

Eli & Keith Barker: I PROUDLY admit that I got myself an IT job because of your help and your classes. Thank you and please never stop giving.

@mahmoudeledrissi7234 10 лет назад

who is better than Eli in IT teaching, no one people he is the best. he know what he is talking about as experience so thank you very much, thanks for teaching us. you know we have saying who teach you one letter i was his slave, ... God bless you,

@1I1I1I.. 8 лет назад

Hey there Eli, just wanted to say this. I am so grateful for these classes. I am a student studying my certificate level 4 (in Australia this is a step up from entry level stuff), in IT networking and also about to try for my MTA, leading onto my MCSA etc. and you have been a godsend. You have taken the aspects that I was struggling with and just worked some kind of voodoo into my brain, and I am now flying ahead in class. I am so looking forward to watching all your other classes and videos. Anyway, I hope I haven't come across as too much of a fanboy, but you're a legend. Have a good one mate.

@arfeenkhanzaidak5097 7 лет назад

RaptorFace Pod

@manthing1467 7 лет назад

What area of Aus you in? My fiance is from Sydney and is about to move here to the US. When I looked at IT jobs it seemed like they pay a little less than the US. She does architectural drafting and it seemed like those jobs paid better in Aus. 5-10 years we will most likely move back there. Housing market in Sydney is insane. We are thinking Brisbane/Queensland later on.

@امرعد-غ1ذ 2 года назад

١٢٥٦

@fcsunday5458 2 года назад

Hi Eli, You are the BEST TEACHER in north America I have seen, you should be granted a Nobel Prize on IT Education! Your English pronunciation is so so so clear and a very proper speech speed, this make me as 1st generation immigrant to catch and understand what you said so easily, many thanks for your great and hard working, this is the BEST and Greatest video and course online

@FrankAtwoodSr 10 лет назад

"What YOU can do..." I love the way he describes things. Talks to us like we are 4 years old. Thankfully!

@stephenndaiga5240 4 года назад

7 years later and this series is still very relevant to me.. WOW!!!!

@boomshakalaka3216 7 лет назад

Eli the computer guy is my fave go- to, for explaining things ... !! He doesn't put you to sleep, listening and viewing is easy, and therefore information is more understandable and easy to remember. Thank you for your tutorials!! so helpful!!

@ManeelxAkosAdor Год назад

“ What we do in life…..echoes in eternity.” - Maximus when saw Eli's technical explanations. You are an amazing individual.

@Dave_thenerd 8 лет назад

4:35 fuck me...he explained Share VS. NTFS way better than my college professor!

@MarkIngle1959 8 лет назад

he is brilliant....

@juliomarambiomaruri7923 8 лет назад

I just finished setting up a server for an office. It's the first time I try it outside a lab environment and it went really smoothly. Thanks Eli!!!

@uniqe23 9 лет назад

dude .. this is the sum of all tutorials for this sharing and securities dillema.. Eli frikin nails it again! thanx bro.. you're so concise and detailed.. preach on the tech gospel bro!

@alejandrovelasco9573 Год назад

I've learned a lot from you than books and other teacher. You really explained the Whys and not just the Hows. Thank you Eli.

@elithecomputerguy 11 лет назад

The Hacking series will continue... I'm going to try to balance the hacking classes with the classes that I actually think will get you folks jobs. Hacking is fun, but Active Directory gets you paid... (... legally... ... )

@MrMurica 4 года назад

how does it feel knowing that this video was literally how my college professor taught the class i was in about file permissions

@jcporrasm 3 года назад

Hey Eli, your content is like good wine. So glad I came accross your channel. I scored a job with MS and your videos had a lot to do with it, thaks a lot man!

@jasonzhangkekupi 10 лет назад

Eli, your videos rock. You should publish tutorial books!

@bernardokava 7 лет назад

Hello Eli, thanks a million for these videos. You have simplified so much in so little time and all is clear in my head. This is the type of learning I need. you are explaining things better than academics. I recommend that all colleges be shut down and let people learn at their own pace from people who actually worked in the industry and have hands on experience like yourself :) Brilliant Tutorials ...

@pbienaime5 11 лет назад

In every classes I realize how amazing you are...you are NOT the computer guy you are " ELI THE NETWORK TECHNOLOGY GUY"...

@mr.emmanuel.b.acheampong6418 7 лет назад

Mr. Tech Wizard a.k.a Mr. Eli Microsoft Prophet you are undoubtedly a freaking legend. You have put my mind at ease. Ah bliss!

@cmdahal6239 9 лет назад

Extremely useful information. Working at corp office with multiple branches, I deal with this kinda issue almost everyday.

@fawadafridi6903 7 лет назад

bro you are the only best person in teaching IT stuff. Your this video worked. thanks

@AdewaleRabiu 11 лет назад

Eli, keep up this wonderful work you are doing. Your work is well appreciated worldwide. I work as an I.T guy, but i still gain a lot from your series. Thumbs up!

@charleswatson3780 10 лет назад

Eli, Thank you very much for your Server 2012 course. I am taking this class now in school & you have helped make a lot of sense out of this stuff. Thanks to you I have my network up and running! Keep up the great work

@WhiteAxl1 10 лет назад

just wanted to tell you that a lot of people here i Denmark watch you and appreciate your work. good luck Eli, i think you're the best :D

@twahl0630 9 лет назад

Thanks Eli. I may be a programmer but you tutorials have giving me network admin knowledge. in my experiences we lost IT Admins and the programmers have to take over their role. Unaware of all the features in the server world these steps have been very useful

@PrateekJain23317 9 лет назад

This is the best possible explanation that i have ever seen. Thanks again Elithecomputerguy.

@damn201 11 лет назад

wooow, in only like 1 - 2 hours I´ve learned much more than 6 months of reading, by only watching your classes, cool u r da master !!!

@chumpmu1 2 года назад

Good video, Eli! It might be better to share to Authenticated Users, instead of Everyone. That way, someone/computers have to be on the domain to access. Also, it’s been my experience that adding another logical disk to put files/shares is better than putting the share on the OS drive/partition. Helps to reduce the security footprint and the risk of escalating permissions.

@Tiwer99 7 лет назад

You're my hero, we succeed school because of these videos!

@sister2sisterbeauty997 8 лет назад

Some people are just ungrateful! Thank you Eli, carry on exactly the way you teaching!

@mostlucky30 7 лет назад

after all these years you still the best... thanks man!

@patrickconway5422 10 лет назад

thank god for eli. 3 views and a day reading the boom and its so clear and easy to understand. Eli this video has been a god send to me. Thank you very much.

@MTStrives 4 года назад

I wanna hug you man.. I learned more than 4 months before...

@rotitnhoj 5 лет назад

Awesome videos Eli! I just started an entry level sys admin for Windows and have found your classes to be very helpful!

@gibson7654 5 лет назад

What experience did you have to land sysadmin position?

@devitastudios4624 6 лет назад

Thank you so much for making these videos......just subscribed to your channel. I am in my last year of School,my degree will be IT Support Specialist . This video was a big help, for one of my classes assignments this week. Thanks again.

@alimusa4860 3 года назад

Eli, you are the best best best not (bad bad bad ) guy delivering good content on youtube

@dalemassicotte6198 5 лет назад

The golden nugget of enlightenment is between 16:00 and 17:00

@zatoichi1973 4 года назад

Thank you Eli I've been watching your videos for years you explain things so clearly!!

@alvisc2002 8 лет назад

Hi guys this isn't entirely IT related but it really helps. For many of these tech videos, increase the speed to 1.25. Then give your mind some time to get used to it. when you're ready. increase to 1.5 and eventually increase to 2. Do your best to watch these videos at that speed. In a week or so you'll notice that even your own productivity and reaction time to things increase as well. Including your ability to learn concepts quicker.

@sofii515 4 года назад

Eli you are just awesome. just because of you everything is looking so interesting.

@cheryltupper3146 7 лет назад

Thanks for this! You're among the best of tech teachers.

@tenzingsherpa5523 5 лет назад

Best videos regarding NTFS and share permission. I am Eli huge fan.

@jetfixer170 8 лет назад

"...They give up and become florists." LMAO!!!

@mikem4432 6 лет назад

must have something against florists?

@Mahadonation1 5 лет назад

it's one of his jokes looool

@5PENC3 10 лет назад

Thanks Eli. Very thorough and informative. I am going to find your videos very useful at my new job.

@biteme2367 11 лет назад

I just thought I would point out the bad users group still has permissions for the private share folder, but the deny permissions takes president over allow permissions. This is what hides the private share folder from the bad users group. I just thought I would clarify since Eli incorrectly stated the bad user does not have permission. He has been denied permission. Great video series Eli. Keep up the good work.

@krazysaudi 11 лет назад

Best System Administration tutor on RU-vid!

@monkeybdb 11 лет назад

eli, if you didnt already know, from the Metro/Start screen you can just start typing and it will automatically bring up search. there is no need to goto the desktop, then goto the charm bar.

@JerrySalandro 11 лет назад

You are an absolutely great presenter and teacher. Great job.

@stephanbuiter8310 9 лет назад

Everything you told in your video is completely clear to me and it works great. I tested it in a virtual environment, it's really great. But if you give everyone share permissions it should also come back as in NTFS security permissions. Did you disabled the inheritance and deleted the everyone on the NTFS permissions perhaps? Please let me know it's nice to hear from you what happend! Thanks for your great video instruction.

@ZiadddTV 8 лет назад

Thanks eli , one step forward on understanding Microsoft World by watching this awesome explanation :)

@imrankarim4880 4 года назад

Hi Eli, Can I just ask is NTFS mean Local only and Share means that it can be across the network? eg. NTFS is on the main PC but if shared permissions and in the correct group can be used on other PC's by the same user on another machine?

@CustomNameHere 11 лет назад

Loving your videos!!!! I stumbled on your RU-vid channel a few weeks ago and have watched a lot of the vids. Appreciating the in-depth explanations. I've been in IT a long time now (too long to want to know) but have lost touch with a lot of some of the technologies. My last role was as a DBA, so have lost touch with network and systems admin stuff. By the way, love that you've dropped the bright orange T-shirts ;-)

@dablet 10 лет назад

hard to believe it was you without the orange shirt! kidding.

@dharmamati6370 4 года назад

Fantastic brilliant and precise!!!!One question:Do we use AD only for staff of an organization or also for clients?Thanks

@jcole_2858 10 лет назад

Hi Eli! With your approach of 'NTFS first, share permissions later' doesn't this create a major security vulnerability? Allow me to explain. If all users are granted read/write access (NTFS) permissions by default, and then the share permissions are used to dictate control, then if a user ever physically gains access to the machine which hosts the file share then they could, in theory, login to the machine locally and would effectively have read/write access to all of the shares, despite share settings which prohibit them from write access?

@novinpradhan7629 5 лет назад

You are simply awesome Eli.

@naveedpaul1989 10 лет назад

AS YOU KJNOW, I AM ELI THE COMPUTER GUY!! Love hearing that. :D Very well presented, really enjoyed it. Thank you

@shaunfielding9123 11 лет назад

Hi Eli, not at my home lab for a week (itching to continue experiment!) one question: If USER2 has settings to "Show hidden folders" will the Private folder be available to see? If so what happens when they try to access it?

@JessicaHernandez-fp4ir 4 года назад

Hi Eli, you're great with these videos. I have one question that no other engineer has been able to answer; is Windows Server 2012 compatible with any other Windows OS? All of the videos I have seen have Windows 8 installed on the user's session. Does it only support that OS?

@tandk86 6 лет назад

Been watching you for years ! thank you for sharing your knowledge it has helped me grow in the IT world to become a solid Sys Admin :)

@usamaajmal2578 4 года назад

Thank you very much Eli. You made life easier.

@simplelifevdo 2 года назад

Hi dear example I shared Drive to everyone as video but I don’t want they to play on server ( want they copy before play). Can you help me pls?

@stephanbuiter8310 9 лет назад

What happend with the group everyone, it's not there anymore when you show the NTFS premissions of Private. (there is Employees) Also standard is Inheritance enabled by you in the video it's disabled howcome? Could you please explain it to me thanks in advance.

@CloudPioneering 7 лет назад

Thank you so much sir. I don't know how to thank you enough for these videos.

@robingaoiran1776 5 лет назад

Sir, I need your expertise with these one. Share>FolderA and FolderB Share (Parent folder) - Read or Read/Execute permission (Everyone) FolderA - Read/Write access (Everyone) FolderB - Read/Write access (certain user/group) I got problem when trying to set or add group permission to subfolder. Permission from parent folder is still applied to subfolder. I already disabled inheritance to FolderA and FolderB and add user/group. I am using windows server 2012 server manager.

@Mbg-tech 5 лет назад

After the modifications on permissions users must logoff and logon again or from my experience a gpupdate /force works too.

@jetboy911a 7 лет назад

Eli thanks for the videos on windows server 2012, you make it easy to understand. I have a small question, I turned on sharing to a share folder, if I right click on properties, and then click on the sharing tab, is shows the shared folder "Shared" but have a number after it, what does that mean? Also, It will not allow me to change the security settings become of the Share6.

@ElBurroSabeMasQueYo 11 лет назад

You're the best it teacher ever. Seriosuly I love this channel you're the best and have taught me so much! Please keep this up! An inspiration to me.

@NeoZod19 8 лет назад

Hello Eli, Well explained! Question for you, when should we consider using DFS and other such us storage pools? Thanks

@FictionsAndIllusions 8 лет назад

Eli, I noticed user 2 is in both employees group and "BAD" group. Since user2 has control completely granted and denied at the same time, will user 2 be able to access the folder still?

@9391862 8 лет назад

+FictionsAndIllusions deny overrides allow. wherever denied has been applied, even if you had allowed in other group he will be denied in particular place where denied has been applied.

@diegkol 11 лет назад

Your tutorials are great. Is Windows Server 12 essentials really that bad for a small business less than 15 people on a network with simple file/printer sharing and sometimes remote access. Will WS12ES work with dyn to do simple vpn and ftp? (Most remotes will use android/apple tablets) I can not make up my mind between a linux box or WS12ES. You confused me, in a good way.

@DoubleD4963 8 лет назад

Can a DC be extended out to Linux so in an environment where Linux and Windows coexist (the real world) an Admin can manage everything through the DC ?

@wallstbets4865 8 лет назад

So you created a group where the folder can be shared and permissions given for access and read and change? And you also created a deny group ( Bad) so 1 user has access to the shared and read and right change, the other user in bad group has none of the above? Is this the correct?

@DoubleD4963 8 лет назад

Can you log off a session through the DC? If you add a user to the BAD group that user will have access until the user logs off ...

@andidegn 11 лет назад

Is it correctly understood that if i create a folder (lets call it Parent) and share that with everyone. Then create a sub folder (lets call that child) and go to setup the security, then by default the inheritance is enabled and therefore the "Everyone" group is already there and set to be allowed everything? This means that you'd have to disable inheritance for that specific folder and remove "Everyone" group from the security tab and then do the rest of the security? And this for every folder

@muhammadamirulrizman8539 7 лет назад

thanks dude for the class.. it helps me a lot to understand about the file sharing and permission.

@shakir.khattak 7 лет назад

Sir if we have one OU with name Marketing and it's users is ( user1, user2, user3, etc) and shared drive with name drive with name Marketing data. now i want a shred folder to each users with their name, Now if one user means user1 login to the system the folder with name suer1 comes to it and its data is not seen by others remaining user and similar user2 login and folder comes user2 to him, and user2 data not seen by the other users. how can we do this?

@Pottsy1981 9 лет назад

I tried to count how many times you said the word "PERMISSIONS".... I lost count lol. Thanks for the detailed explanation, although I would of like to hear you explain the difference between each of the attributes in the folder permissions eg. read, write, modify etc.

@Brandon-jm5nt 8 лет назад

Hi Eli, with file and share permissions in Windows Server 2012, can you create passwords on the files an folders without having to use third-party software?

@TheBurgy91 8 лет назад

Brandon Cornell it wouldn't make so much sense when you're using Domain users and computers since the users have to first login into Windows (using their password) therefore you already have a security control. If you don't want a specific file to be accessed by others simply do not give the NTFS permissions to him. Alternatively you can encrypt the file on the share drive and then give the file+certificate to open the file to the needed user.

@lordtango6116 3 года назад

That's great you make it easy but I wanna ask can I make permission affective without doing logoff and logon again

@elithecomputerguy 11 лет назад

Google this "AccessChk v5.11" and see if it works. I haven't used it, but it looks like it fits the bill...

@networker9304 Год назад

@eli how much do u think has changed in windows server in todays date from 2012

@onedevil420 11 лет назад

My hard drive is full with your videos please make short videos, as I always say that you are doing great job

@MrWadv 11 лет назад

Thanks for the videos. I am currently working on a degree in Network Engineering and I've just begun, so far i've completed my A+ and these are helping me understand my lessons better on Windows Server 2012. if there is any advice you could give me towards what i need to know for jobs would be amazing. thanks.

@runningfoxx 9 лет назад

Spot on Eli. Perfect and clear explanation as always.

@KariMcManigal 8 лет назад

I just have to say...you totally saved me!!!!

@Handsom3Joe 11 лет назад

Howdy! I can see the "shared" folder but it appears empty! I can find neither "private" nor "public" no matter what user I log in as...what am I missing?

@punkrocker22ful 9 лет назад

Let me ask you something guys... can we say that a resource is an application?? (for example a software that users of a company uses in order to do things like accounting, logistics etc..)

@fatherfigure2766 3 года назад

can somebody tell me how was he able to create folder as "user2" because it was part of employees and bad group and in bad group he had "full control deny". So how was user2 was able to create folders

@ICEMANGARAGE 11 лет назад

Best tutor ever. great work eli

@peonmyhall 10 лет назад

Yes! Learning file permissions and mocking florists for poor life choices. My two favorite things in one video. A+++

@mohamedayman1817 4 года назад

Know I have a question can I as a user give permissions to a folder that I created inside a shared folder

@jess2768 4 года назад

i wana ask why my computers are disconnecting from my server after i turn them off?

@candycandelatia3262 8 лет назад

is opensource like vicibox can work together with windows server 2012 R2 in a single network ?

@Adam-vo6cr 11 лет назад

Eli you should let me buy you dinner sometime man. Your awesome!

@abodea6228 8 лет назад

you are great i like your style ......thanks alot

@nicholasanthonydenora9795 7 лет назад

GREAT JOB ELI YOU ROCK... GOOD EXPLANATION...

@akashrastogi5886 7 лет назад

Eli , could you please let me know how exactly to prepare for MS active directory certification exam? would going through the books, watching the videos and playing with the related stuff in my lab be enough ?

@dangamage 7 лет назад

I have a question. Please answer if you understand this. If the User2 is in both Employees group and Bad group, why does User2 only have the Bad group share permissions? Why does AD choose Bad group over Employees group?

@Okinhh 6 лет назад

Its not that AD choose BAD group over Employees its that deny permissions always exceed allow permissions, so since USER 2 is both in BAD and Employees groups he gets the deny from BAD.

@Honkinwaffle 8 лет назад

I need help. I have created a root folder called "Server" I am able to locate and open that folder when it is shared, On any user account or admin account I cannot see anything past this folder nor can I create anything in the folder.