09. Sharing Drives and Folders.pdf

(192 KB) Pobierz
Sharing Drives
and Folders
Security Fundamentals
Instructor: Don Jones
Sharing Drives and Folders
Security Fundamentals
In This Lesson:
Introduction to Shares
Share vs. File/Folder Permissions
Special and Administrative Shares
Sharing Drives and Folders
Security Fundamentals
Introduction to Shares
Shares expose a portion of the file system to network users.
This enables portions of the file system to remain private and
unseen by network users.
Shares can expose a single folder (and all its contents), or an
entire drive (and everything on it).
1123952650.050.png 1123952650.061.png 1123952650.069.png 1123952650.070.png 1123952650.001.png 1123952650.002.png 1123952650.003.png 1123952650.004.png 1123952650.005.png 1123952650.006.png 1123952650.007.png 1123952650.008.png 1123952650.009.png 1123952650.010.png 1123952650.011.png 1123952650.012.png 1123952650.013.png 1123952650.014.png 1123952650.015.png 1123952650.016.png 1123952650.017.png 1123952650.018.png 1123952650.019.png 1123952650.020.png 1123952650.021.png 1123952650.022.png 1123952650.023.png 1123952650.024.png 1123952650.025.png 1123952650.026.png 1123952650.027.png 1123952650.028.png 1123952650.029.png 1123952650.030.png 1123952650.031.png 1123952650.032.png 1123952650.033.png
 
Sharing Drives and Folders
Security Fundamentals
Share vs. File Permissions
Shares also have their own permissions, similar to NTFS
permissions.
They are a top-level object, and do not inherit permissions from
anyplace.
Only the permissions allowed by the share may pass through to
NTFS.
In other words, if the share only permits Read, it doesn’t matter
what extra permissions are on the files – only “Read” activity
will make it through the share.
You can have multiple shares, with different permissions,
pointing to the same drive or folder.
Sharing Drives and Folders
Security Fundamentals
Special and Admin Shares
On servers, drives are shared by default using an Administrative
share – such as C$.
The $ prevents the share from being advertised to the network;
you have to know about it to connect to it.
Only Administrators are given permission by default.
Special shares:
ADMIN$ - points to the Windows system folder, used for
remote administration
IPC$ - Used for inter-process communications
PRINT$ - Used for remote administration of printers
Sharing Drives and Folders
Security Fundamentals
What We Covered
Introduction to Shares
Share vs. File/Folder Permissions
Special and Administrative Shares
1123952650.034.png 1123952650.035.png 1123952650.036.png 1123952650.037.png 1123952650.038.png 1123952650.039.png 1123952650.040.png 1123952650.041.png 1123952650.042.png 1123952650.043.png 1123952650.044.png 1123952650.045.png 1123952650.046.png 1123952650.047.png 1123952650.048.png 1123952650.049.png 1123952650.051.png 1123952650.052.png 1123952650.053.png 1123952650.054.png 1123952650.055.png 1123952650.056.png 1123952650.057.png 1123952650.058.png 1123952650.059.png 1123952650.060.png 1123952650.062.png 1123952650.063.png 1123952650.064.png 1123952650.065.png 1123952650.066.png 1123952650.067.png 1123952650.068.png
 
Zgłoś jeśli naruszono regulamin