Documente Academic
Documente Profesional
Documente Cultură
Lesson 6
File and Print Services
Learning Objectives
Students will learn about:
NTFS
Sharing Drives and Folders
Printers
Enabling Auditing
ODN Skills
2.4
Lesson 6
For a server environment that requires a lot of printing, you may need to create printer
pools. Therefore, explain a printer pool and how to create one. Make sure to let the
students know that the printers must be the same.
To secure printers, you would use printer permissions. You can explain that printing is
similar to NTFS permissions. Then explain how to manage print jobs. To finish the
discussion on printing, discuss Internet printing.
To complete the security picture, you may need to enable auditing. Therefore, you need to
explain that auditing is enabled using group policies. To complete this discussion, discuss
the type of events to audit. Then focus on auditing objects, such as files and printers.
Key Terms
administrative shares A shared folder typically used for administrative purposes and
usually hidden.
auditing A component of security that records users who have logged in and what each
user accessed or tried to access.
effective permissions The actual permissions when logging in and accessing a file or
folder.
Encrypted File System (EFS) A core file encryption technology used to store
encrypted files on NTFS file system volumes.
Encryption The process of converting data into a format that cannot be read by another
user. Once a user has encrypted a file, it automatically remains encrypted when stored on
disk.
explicit permission Permissions granted directly to a file or folder.
inherited permission Permissions that are granted to a folder (parent object or
container) that flow into child objects (subfolders or files inside the parent folder).
Internet printing The mechanism used to print documents over the Internet using http
or https protocols.
NTFS permissions Allow you to control which users and groups can gain access to
files and folders on an NTFS volume.
owner The identity that controls how permissions are set on the object and to whom
permissions are granted.
print device The physical printer.
print job Data sent to a printer consisting of one or more files.
printer The logical printer that represents the physical printer in Windows.
printer permissions The mechanism that specifies who can use a printer, who can
manage a printer, and who can manage the print jobs.
shared folder A folder that can be accessed remotely by multiple users.
6-2
Lesson 6
Lesson 6
File and Print Services
Knowledge Assessment
Fill in the Blank
Complete the following sentences by writing the correct word or words in
the blanks provided.
1.
2.
The NTFS special permission that allows you to move through a folder to
reach lower files or folders is traverse folder.
3.
The Windows component that allows you to manage shares and NTFS
permissions is Windows Explorer.
4.
Permissions that flow from a parent object to a child object are called
inherited permissions.
5.
The effective permissions are the actual permissions when a user logs in
and accesses a file or folder.
6.
7.
For Windows Server 2008 to be seen on the network, you must enable
network discovery.
8.
9.
When some has removed all users from a folder, you can take ownership
of the folder.
Multiple Choice
Circle the letter that corresponds to the best answer.
1.
2.
Write
b.
Read
c.
Modify
d.
Fully Control
Explicit deny
b.
Explicit allow
c.
Inherited deny
6-3
Lesson 6
d.
3.
Inherited allow
Full Control
b. Write
4.
5.
c.
Change
d.
Read
443
b.
23
c.
9100
d.
3000
What is a single virtual printer with a single print queue that consist of two
or more printers?
a.
Print collection
b.
Direct printers
c.
Printer group
d. Printer pool
6.
b.
c.
d. $
7.
DFS
b. IIS
8.
9.
c.
GPO Manager
d.
Task Manager
What is the minimum share permission that allows you to change file and
folder permissions?
a.
Full Control
b.
Change
c.
Read
d.
Manage
When you copy files from one folder to another folder within the same
volume, you get the ____________.
a.
d.
6-4
Lesson 6
10. You are an administrator on a computer. Unfortunately, there is a folder that
you cannot access because you have do not have permissions to the folder.
What can you do?
a.
b.
c.
d.
True / False
Circle T if the statement is true or F if the statement is false.
T
1.
2.
To see who accesses a file over time, you only have to turn on
object access audit events.
3.
When you are looking at NTFS permissions that are grayed out, it
means that you dont have the permissions needed to modify the
NTFS permissions.
4.
You can encrypt and compress a file within NTFS at the same
time.
5.
Competency Assessment
Scenario 6-1: Creating a Shared Folder
You have a Data folder that you need to share so that all managers have access and can
make changes, but no one else can access it. What should you do to set this folder up?
Create a Manager group with all of the managers as members. You should create a
Data folder. Share the Data folder. Change the Everyone to Allow Full Control share
permission. Then grant the Allow Modify NTFS permissions to the Managers group.
Scenario 6-2: Auditing the Managers folder
You just created a Data folder for your Managers and you need to verify that it is not
getting accessed by anyone who is not supposed to access the files and if someone deletes
or makes changes to a system. What should you do?
You need set up auditing. You must first enable object access auditing using group
policies or local security policies for the computer where the folder is located. Then
you need to enable Full Control successful and Failed access. You will then
occasionally search the security logs in the event viewer from time to time.
6-5
Lesson 6
Proficiency Assessment
Scenario 6-3: Managing a Folder
1. Create a Data folder. In the Data folder, create a Manager folder and
Sales folder.
2. Share the Data folder and assign Everyone Allow Full Control.
3. Modify the NTFS permissions for the Manager folder so that only
the Managers group and Administrators group have access to the
Managers folder. Grant Allow Modify NTFS permission to the
Manager group.
4. Modify the NTFS permissions for the Sales folder so that only the
Sales and Managers groups and Administrators groups have access to
the Managers folder. Grant Allow Modify NTFS permission to the
Manager and Sales group.
6-6
Lesson 6
6-7