70-240 in 15 minutes a week: Administration of Resources – Part 1 Page 2

As far as compression is concerned, you still need to know what happens when you copy or move compressed files within and between volumes. The table below outlines what happens to the compression attribute on a file in the different scenarios. Remember, both copying and moving a file to a FAT or FAT32 volume results in all compression settings being lost. Incidentally, you can also use the table below to describe what happens to NTFS permissions when a file is moved or copied to a folder.

Next lets explore NTFS permissions. Although many concepts remain similar to those in NT 4.0, some of the implementation details have changed. NTFS permissions are still cumulative in nature. That is, if multiple permissions apply to you, the combination of permissions is your effective permission. If you were given Read access to a folder as a member of Sales, and Modify on the same folder as a member of Managers, your effective permission would be Modify. There is an exception, of course. Any permissions that are explicitly denied always override those explicitly allowed.

The table below outlines the standard permissions that exist in an Access Control List (ACL) for files and folders in Windows 2000. Note that all Standard Permissions are comprised of more granular Advanced Permissions which can be viewed by clicking the Advanced button on the Security tab of a the file or folder’s properties. 

There are a couple of important notes that you should remember about NTFS permissions:

– By default, NTFS drives on Windows 2000 are set to allow Everyone the Full Control permission at the drive root. Some folders, such as the
%systemroot% directory, have more restrictive permissions applied.
– By default, permissions in Windows 2000 are inherited. You can tell permissions have been inherited when the permission boxes are grayed out. This means permissions have been set at a higher level.
– If you wish to change permissions that have been inherited, you have to first clear the
‘Allow inheritable permissions from parent to propagate to this
object‘ check box. Doing so will ask you whether you wish to remove all existing permissions, or copy the existing permission (the latter takes inherited permission and simply applies them directly to the file or folder).
– When you add a new user or group to a file, they are given the
‘Read’ and ‘Read and Execute’ permissions by default (same for a folder,
but includes ‘List Folder Contents’ as well).
– You can set file and folder permissions from the command line, using the
Calcs.exe tool.
– File permissions always override folder permissions.