Lab 6-10 Testing Folder Permissions 

  1. Create a new folder on your server and name it Empire Secrets.
  2. Right click on the folder and select the security tab in folder properties.
  3. Click “Advanced”.
  4. Click the Allow inheritable permissions from the parent to propagate to this object and all child objects button. By default, all permissions are assigned to new folders that the parent folder has. When it asks if you want to remove or copy the permissions, click remove.
  5. Click OK.
  6. Click on the Administrators group and remove them.
  7. Click the Add button. Find the Galactic Senate group. Add them.
  8. In the permissions dialogue box, give them full control. Note that by clicking full control, all other boxes will be selected as well since it gives you…full control…over everything.
  9. Click ok.
  10. Now go find that folder. Double click on it. Can you access it? You should not be able to because you no longer have permissions to that folder.

 

 

  1. Now go back into the security permissions. Add the Order of the Sith Lords group and give them full control click okay.
  2. Go back to the folder. Can you get into it now? You should be able to since you’re a member. Oh wait, you’re not a sith? If you have a user who is not a member of a group, but he/she needs access, you can do one of two things:
    1. Create a group just with that user in it. Give that group access.
    2. Just give that user access.
    3. NOTE: Microsoft says you should do number 1, not number 2. Microsoft says you should never give an individual user access. Why? Because then it’s hard to remember what all you’ve given individuals access to, should that individual leave the company. It’s way easier to just remove that user from the group than it is to actually go to each resource and remove that user’s access. (Yes, you can delete the user, but Microsoft says not to do that either, in case you hire someone else in that person’s place who needs to same kind of permissions and restrictions. You can just rename the account.)
  3. Create a text document in the folder and type into it “HI, my name is____ and I like eggs. Close it.
  4. Right click on the document and click security. Who has access? Why?

 

 

 

  1. Go into the security and remove the Allow inheritable permissions from the parent to propagate to this object and all child objects business as above. Click OK.
  2. Add Humans, but give them read only. Remove your group or use from the security.
  3. Click OK.
  4. Go back and double click on the document.
  5. Make a change. Close it. What happens?

 

 

  1. Keep the permissions open so I can check you off.