Configuring NTFS permissions

[@ahmedb768]

Amazing, Thank you George. I have an interview in a few and this refreshed my memory.

[@ddaltonyvcc]

I'm glad it was helpful.

[@TopNochSmoker]

This cleared so much up for me. Now its just understanding what trumps what. Thank you

[@ddaltonyvcc]

Glad it was helpful.

[@just_the_job]

Some great valuable pieces of info here. Thanks for the video.

[@ddaltonyvcc]

Glad it was helpful Justin.

[@jibronigibironi8959]

@@ddaltonyvcc Ok, so I'm trying to add my dads laptop as a user so I can give it access to my windowsimagebackup folder on my networked external hard drive. But when I type in the name of his computer, it can't find it, even though it already has access to the drive itself, or the volume.

[@yukon_deb6005]

Thank you so much very well explained.

[@edwardv4546]

Thank you so much. Taking the MD 100 tomorrow and this cleared up a few things.

[@ddaltonyvcc]

Excellent! Good luck and let us know how it goes!

[@edwardv4546]

@@ddaltonyvcc hey I passed! Thank you again. I still have to finish the MD 101 then I’ll officially be a Microsoft Desktop Administrator.

[@ddaltonyvcc]

@@edwardv4546 I love it! Congratulations!

[@SAIFULLAHJAMIL]

Thank you so much, mate!

[@ddaltonyvcc]

I'm glad it was helpful.

[@muhammadwaqarsiddiqui6731]

Hey George, amazing stuff. I have a question. What will happen to authenticated and users groups ? will they still have access to those files ? or you will give permissions to all users one by one which I think no one wanted. correct me if i'm wrong.

[@ddaltonyvcc]

Well, first off, my name is David. :) If you leave permissions for authenticated users, than anyone who is logged in will have that level of access. That is why we remove authenticated users. Typically, you don't want to grant permissions to individual users but to groups. The best practice is to put users in global groups, make global groups members of domain local groups, and give those domain local groups NTFS permissions to files and/or folders.

[@nolansager6538]

Excellent video, thank you so much!

[@ddaltonyvcc]

I'm glad it was helpful.

[@edlamchin]

Great video. Just would like to ask. When you restricted George by removing the inheritance, could the other users access the special access folder ? they dont have inherited permissions on this

[@ddaltonyvcc]

If permissions are not explicitly allowed, they are implicitly denied. In other words, if you don't grant them access, they don't have it.

[@tato2493528]

great explanations. ty, sir

[@ddaltonyvcc]

I'm glad it was helpful.

[@zhihongxu2885]

Thank you for your video, and it is very useful.

[@ddaltonyvcc]

Glad it was helpful.

[@simoneoddi272]

Thank you so much for the creare explanation. Let's say that I want to give read permission only to George while giving every other user the modify permission. Do i need to use the deny?

[@ddaltonyvcc]

No. I tend to avoid using the default users groups. They have some basic permissions that I don't always want to use because it sometimes create access that I don't want. I would suggest creating a group for everyone except George and giving that group modify permissions. Then I would create a group for George (or you could assign the permissions directly to him) and give that read permissions. An alternative would be to create a group for everyone except George and grand them modify permissions while leaving the default Users group (which George would be a part of) with the default read permissions.

[@bevri]

Thank you!

[@vSole_]

What is " special permissions under the BASIC tab, the one that is always unchecked

[@ddaltonyvcc]

Standard permissions are groupings of special permissions. You can view the extended permissions as well, although most of the time basic permissions will work. If you use a group of extended permissions that do not fit into the standard basic permissions, it will show up as special permissions.

[@HasanQassar]

I accidentally removed the special permission of the authenticated users, any tips how can I recover it? Many programs stopped responding

[@Ibelieve218]

So If I felt I needed to how do I restore all of C drive ntsf permissions

[@mb-electricalservices]

Is there a way to put everything back to their default settings? I may have inadvertently messed this up in win10 and found that the os kept saying the recycle bin was corrupted..... I really shouldn't mess with things I don't fully understand. :(

[@juzer2354]

Great video, David. Any idea on why object whose owner is 'Guest' is not getting permissions from its parent folder?(inheritance is enabled btw) Thanks.

[@ddaltonyvcc]

The guest account is a different animal. I would recommend taking ownership of the file and not leaving it with the guest account.

[@juzer2354]

@@ddaltonyvcc Thank you for your reply. Is there any workaround to this issue because whenever I transfer file from other pc on my network, that file gets 'Guest' as their owner? Now when I put that file in shared folder again it doesn't get folders permissions.

[@ddaltonyvcc]

@@juzer2354Interesting. Are you on a domain network or a workgroup? Are you using NTFS or FAT for the file system?

[@juzer2354]

@@ddaltonyvcc I am on a simple home network with couple of Windows PCs, all of them are in a workgroup. NTFS file system is used. Password protected sharing is turned off. I clean installed Windows on two computers to test sharing of files, still the same, when file gets transferred, its owner becomes: 'Guest'.

[@ddaltonyvcc]

@@juzer2354Okay, being on a home network changes things quite a bit. You don't have centralized authentication like you would on a domain. Do you have accounts on each computer for each potential user on the network?

[@AceBean__]

How to reset it to default?? Like it was before making changes. For admin and guest ac?

[@ddaltonyvcc]

The easiest way would be to re-enable inheritance and then remove anything permissions that are explicit (not inherited).

[@profkwl775]

Question about the GeneralAccess folder. While anyone can read and write inside that folder, how do you prevent anyone from deleting the GeneralAccess folder itself? If I have 3 local users: Admin, User1, and User2. How can I set that User1 and User2 can read/write on GeneralAccess folder while only Admin can delete that folder?

[@ddaltonyvcc]

You will need to use special permissions. From the special permissions screen you can uncheck the option to allow user1 and user2 to delete files.

[@profkwl775]

@@ddaltonyvcc i've tried this but ended up having user1 and user2 unable to delete or rename files inside that folder. maybe I've done it wrong. what I wanted is to have both user able to read and write files and folders, rename files and folders inside GeneralAccess but prevent both of them to delete GeneralAccess itself.

[@ddaltonyvcc]

@@profkwl775 In that case, when you remove the permissions you will need to specify that the limitation is only for that one folder and not for anything underneath it. Look for a scope setting.

[@retpaladin593]

that's the part where DENY is useful, you choose the user or the group of users, then choose DENY then check DELETE and only applies the scope of THIS folder, so the regular users cannot delete de folder itself but can do whatever they want inside of the folder...

[@samkelohlakanphan6924]

How can I contact you personaly

[@aman___thakur]

how to provide write permission without delete

[@ddaltonyvcc]

You would chose the Advanced permissions. You can fine tune permissions there.

[@Doris-y5v]

We don't write , we type write is for pen and paper

[@ddaltonyvcc]

Lol

[@l1nxz]

Thx

[@muddybuddy2752]

Yes

[@thorrinb6925]

your swallowing throat noise is annoying, drink some water for heavens sake