11

CONFIGURING AND MANAGING SHARED FOLDER SECURITY

Chapter 8

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 2

OVERVIEW

Create and remove shared folders

Control access to shared folders

Analyze and troubleshoot combined permissions

Manage and troubleshoot offline files

Manage and troubleshoot Web server resources

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 3

SHARED FOLDERS

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 4

SHARED FOLDER PERMISSIONS

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 5

SHARED FOLDER PERMISSIONS (CONTINUED)

Apply to folders only (not files).

Do not restrict local access to resources.

Only permission available for FAT.

Default permission is Everyone/Read.

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 6

SHARED FOLDER PERMISSIONS (CONTINUED)

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 7

PLANNING SHARED FOLDERS

Consolidate data.

Assign permissions to folders.

Assign most restrictive permissions possible.

Use groups for permission assignment.

Use intuitive share names.

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 8

PLANNING SHARED FOLDERS (CONTINUED)

Multiple permissions.

Limit use of Deny permission.

Permissions interact with NTFS permissions.

Folder no longer shared if moved or renamed.

Copies of folders are not shared.

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 9

SHARED FOLDER REQUIREMENTS

Administrators or Power Users group

Must have NTFS:Read to share folders

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 10

SHARING FOLDERS

Create Shared Folder Wizard

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 11

SHARING FOLDERS (CONTINUED)

Windows Explorer

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 12

SHARING FOLDERS (CONTINUED)

NET SHARE

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 13

ADMINISTRATIVE SHARES

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 14

STOP SHARING FOLDERS

Computer Management: choose Stop Sharing from shortcut menu

Windows Explorer: select Do Not Share This Folder

NET SHARE: NET SHARE <sharename> /DELETE

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 15

MULTIPLE SHARES

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 16

UNC PATHS

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 17

CONNECTING TO SHARED FOLDERS

My Network Places

Mapped drives (Windows Explorer)

Mapped drives (NET USE)

Run dialog box

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 18

COMBINING NTFS AND SHARE PERMISSIONS

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 19

MONITORING SHARED FOLDERS

Shared Folder snap-in

Must be Administrator or Power User

Monitor connections, open files, and file locks

Might also disconnect users

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 20

MONITORING SHARED FOLDERS (CONTINUED)

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 21

ENABLING OFFLINE FILES (SERVER)

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 22

ENABLING OFFLINE FILES (CLIENT)

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 23

CONFIGURING OFFLINE FILES

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 24

CONFIGURING SYNCHRONIZATION

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 25

INTERNET FILE SHARING

Installing Internet Information Services (IIS)

Internet Management console

WebDAV and Web folders

Web folder authentication

Using Web folders

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 26

INSTALLING IIS

Installed from Add/Remove Programs

Apply Windows Updates

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 27

INTERNET MANAGEMENT CONSOLE

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 28

WEB FOLDERS

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 29

CLIENT CONNECTIONS TO WEB FOLDERS

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 30

SUMMARY

Share folders to allow remote usage.

Share permissions apply only to folders.

Default share permission is Everyone:Read.

Replace default share permissions to reduce security exposure.

Administrators and Power Users can share folders.

NTFS and share permissions can be combined.

Chapter 8: CONFIGURING AND MANAGING SHARED FOLDER SECURITY 31

SUMMARY (CONTINUED)

Offline files must be enabled before use.

Synchronization Manager synchronizes offline files.

IIS and WebDAV allow Internet file sharing.

WebDAV clients can use Web folders.