Permissions for Other Objects
The permission descriptions in the previous section described permissions relative to files and folders. There is a different set of permissions for Registry keys, printers, and Active Directory objects. To view or set permissions for an object, in Windows Explorer, right-click the object and choose Properties. In the Properties dialog box, the security tab lists the standard permissions.
To see the power and control that NTFS provides for access control, it is best to investigate the permissions of an OU (Organizational Unit) within Active Directory. The figure below shows permissions for a typical OU.
Figure 3 – Object Properties dialog box showing Security tab
There may be over 10,000 individual advanced permissions that you can set for an OU. You can see a partial listing below.
Figure 4 – Partial listing of advanced permissions
- NTFS Permissions
- Setting Permissions
- File and Folder Basic Permissions
- File and Folder Advanced Permissions
- Effective Permissions
- Changing Ownership of Files and Folders
- Moving and Copying Protected Files
- Troubleshooting Access to Files and Shared Folders
Permissions for Other Objects- User Rights vs. NTFS Permissions
- Share Permissions vs. NTFS Permissions
- Explicit vs. Inherited Permissions
- Allow vs. Deny Permissions
- Permission Precedence
- Combining Shared Folder Permissions and NTFS Permissions
- Sharing and Adding Permissions
- Backing up and Restoring NTFS Permissions on a Specified Volume
- Off-line Access to Shared Folders (Caching)
- Metafile $Secure
- Appendix. Script to Backup or Restore NTFS Permissions
- Glossary
