2-1 Administration of Resources

> Monitor, manage, and troubleshoot access to files and folders.

Configure, manage, and troubleshoot file compression.

Windows 2000 uses compression similar to DriveSpace in windows 98, but unlike DriveSpace which compress entire volumes, it can compress individual files and folders.

You can compress files and folders only on drives formatted with NTFS, also compressed files and folders cannot be encrypted

If you add or copy a file into a compressed folder, it is compressed automatically. If you move a file from a different NTFS drive into a compressed folder, it is also compressed. However, if you move a file from the same NTFS drive into a compressed folder, the file retains its original state, either compressed or uncompressed.

To compress a file or folder

  1. In explorer select the file or folder you want to compress, choose properties
  2. Check the Compress contents to save disk space box

To remove compression from a file or folder, follow directions above and uncheck the Compress contents to save disk space box

Control access to files and folders by using permissions.

  • In Windows 2000, new files and new subfolders inherit permissions from the folder in which they are created.
  • You can set file permissions only on drives formatted with NTFS.
  • To change permissions, you must be the owner or have been granted permission to do so by the owner.
  • Groups or users granted Full Control for a folder can delete files and subfolders within that folder regardless of the permissions protecting the files and subfolders.
  • If the check boxes under Permissions are shaded, the file or folder has inherited the permissions from the parent folder, as in the graphic below.

Permissions on drives formatted with NTFS:

From Windows Explorer, right-click the file or folder select properties, and then click Security. Select add or remove to add users or groups and the basic permissions to grant them.

Click advanced for special permission options

Select view/edit button to allow or deny special permissions

Permissions for files and folders:

Traverse Folder/Execute

File Traverse Folder allows or denies moving through folders to reach other files or folders, even if the user has no permissions for the traversed folders (applies to folders only). Traverse folder takes effect only when the group or user is not granted the Bypass traverse checking user right in the Group Policy snap-in. (By default, the Everyone group is given the Bypass traverse checking user right.) Execute File allows or denies running program files (applies to files only).

List Folder/Read Data

List Folder allows or denies viewing file names and subfolder names within the folder (applies to folders only). Read Data allows or denies viewing data in files (applies to files only).

Read Attributes

Allows or denies viewing the attributes of a file or folder, such as read-only and hidden. Attributes are defined by NTFS.

Read Extended Attributes

Allows or denies viewing the extended attributes of a file or folder. Extended attributes are defined by programs and may vary by program.

Create Files/Write Data

Create Files allows or denies creating files within the folder (applies to folders only). Write Data allows or denies making changes to the file and overwriting existing content (applies to files only).

Create Folders/Append Data

Create Folders allows or denies creating folders within the folder (applies to folders only). Append Data allows or denies making changes to the end of the file but not changing, deleting, or overwriting existing data (applies to files only).

Write Attributes

Allows or denies changing the attributes of a file or folder, such as read-only or hidden. Attributes are defined by NTFS.

Write Extended Attributes

Allows or denies changing the extended attributes of a file or folder. Extended attributes are defined by programs and may vary by program.

Delete Subfolders and Files

Allows or denies deleting subfolders and files, even if the Delete permission has not been granted on the subfolder or file.

Delete

Allows or denies deleting the file or folder. If you don't have Delete permission on a file or folder, you can still delete it if you have been granted Delete Subfolders and Files on the parent folder.

Read Permissions

Allows or denies reading permissions of the file or folder, such as Full Control, Read, and Write.

Change Permissions

Allows or denies changing permissions of the file or folder, such as Full Control, Read, and Write.

Take Ownership

Allows or denies taking ownership of the file or folder. The owner of a file or folder can always change permissions on it, regardless of any existing permissions that protect the file or folder.

Synchronize

Allows or denies different threads to wait on the handle for the file or folder and synchronize with another thread that may signal it. This permission applies only to multithreaded, multiprocess programs.

> Manage and troubleshoot access to shared folders.

Create and remove shared folders.

  1. From Windows Explorer, right-click the folder, select properties and then click Sharing.
  2. On the Sharing tab, click Share this folder.

To change the name of the shared folder, type a new name in Share name. The new name is what users will see when they connect to this shared folder. The actual name of the folder does not change.

To add a comment about the shared folder, type the text in Comment. To limit the number of users who can connect to the shared folder at one time, under User limit, click Allow, then enter a number of users. (In Windows 2000 Professional, the maximum user limit is 10 regardless of the number you type in Allow.)

To set up this shared folder to be used offline, click Caching.

You can hide the shared folder from browsing by typing $ as the last character of the share name. Users will not be able to see this shared folder when they browse using My Computer or Windows Explorer, but they can map to it.

Control access to shared folders by using permissions.

  1. From Windows Explorer, right-click the folder, and then click Sharing.
  2. On the Sharing tab, click permissions.
  3. Select or add user/group and check witch permission to deny or allow