Who Gets Into the Folder?

About this interactive

The file server lesson builds one folder per department (Finance, IT, Sales, Operations), one local group per department, and then sets each folder's NTFS permissions: - The department's group is added with Modify: members can get in and work with the files, but not change the permissions. - Full control is everything Modify gives plus the right to change the permissions, which is why the lesson holds it back from the department groups. - Users, the group every account on the server is in, starts with Read & execute. Left there, anyone with an account gets in, so the lesson removes it. - Anyone whose group is not on the list is kept out. Each folder is then shared to Everyone. The share and the NTFS list both apply, so with the share giving Everyone full access, the NTFS list decides who gets in and what they can do. That is the setup on every card here.

What you'll learn

Work out from a person's groups and a folder's NTFS permission list whether they can get into a shared folder
Tell Modify from Full control: both let a group work in the folder, and only Full control lets it change the permissions

Aligned to

CompTIA Tech+

6.4 Compare and contrast authentication, authorization, accounting, and non-repudiation concepts.

3.2 Compare and contrast components of an operating system.

CompTIA A+ Core 2

2.5 Given a scenario, manage and configure basic security settings in the Microsoft Windows OS.

Key terms

NTFS Permissions: Access control settings applied to files and folders on Windows NTFS-formatted drives that define which users or groups can read, write, execute, or modify them. NTFS permissions are preserved when files are moved within the same volume but are reset when copied.
Local Group: A collection of user accounts defined on a single Windows machine used to assign permissions to local resources such as shared folders.
Authorization: The process of determining what actions or resources an authenticated user is permitted to access.
File Server: A dedicated computer on a network whose primary purpose is to store and manage shared files and folders for access by other networked devices.
Share Permissions: Network-level access controls applied to a shared folder in Windows that define the maximum level of access remote users can have when connecting over the network.

Topics

File Server Ntfs Permissions Groups Authorization Windows Server Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →