Tbe expert’s guide to W/z'ndows NT 4.0
`
`WORKSTATION 4-0
`
`
`
`Configure Windows NT as a
`”universal client” for access to
`
`multiple networks and take full
`advantage of Remote Access
`Services and Dial-Up Networking
`
`WIND0W8 NT®
`
`
`
`Set up and run a secure
`intranet Web server with
`
`Windows NT Workstation 4.0
`
`Jim Boyce, et al.
`
`QUE"
`
`BIackBerry Corporation Exhibit 1024, pg. 1
`
`BlackBerry Corporation Exhibit 1024, pg. 1
`
`

`

`
`
` 742
`
`Chapter 33 Managing Server Properties
`
`Controlling Resource Access
`
`As explained briefly in Chapter 32, “Administering Users," you can apply two different
`sets of permissions to an object. One set, called object permissions, applies local access to
`the object. The object permissions determine the level of access users and groups have to
`
`a resource when they are logged on locally to the workstation and accessing the resourol ;
`locally.
`
`The other set of permissions, called share permissions, apply to a resource that is shared -
`on the network. The share permissions determine the level of access users and group.
`have to the share resource from across the IAN. The types of permissions you can u -
`.
`-
`
`for both share and object permissions are the same. Also, you apply share permission!
`
`much the same way as object permissions, with only a slight variation in how you ini
`the process. This chapter explains permissions and how to set them, both for objects
`
`shares.
`
`Understanding Permissions
`In Windows NT, permissions determine the authority a user has to access certain
`
`resources such as files, directories, printers, and other objects and services. The per -.‘
`
`sions that apply to specific objects depend on the object’s type. The permissions for |
`printer, for example, are different from the permissions for a file. In addition, file no -
`"
`
`sions vary according to the type of file system being used. You have much finer con ».
`7
`
`over access on NTFS file systems than FAT file systems.
`
`
`
`.-
`
`N o 1' E You can set object and share permissions on individual files under the NTFS file
`system. You can't set permissions on individual files in a FAT file system, although you
`can set a file’s attributes. On both file systems you can set share permissions on a folder.
`although FAT supports only a limited set of permissions compared to the full range offered by
`NTFS.
`“at
`
`You can apply the following permissions as object permissions and share permi
`directories on NTFS volumes:
`
`
`
`
`.
`
`-
`
`
`I No Access. This permission prevents the user from accessing the director!
`any way, even if the user belongs to a group that has been granted accent! to i
`directory.
`I List. With this permission the user can only list the files and subdirccloflol 7
`
`
`
`'
`
`
`
`I Read. This permission en:
`I Add. With this permission
`or change existing files.
`I Add & Read. This permis:
`I Change. With this permiss
`change the contents of exist
`I Full Control. With this per
`change permissions for the r
`directory and its files.
`I Special Directory Access.
`sions that include Read, Writ
`Ownership.
`
`You can assign the following permi
`I No Access. This permission
`belongs to a group that has bi
`I Read. This right enables the i
`I Change. With this right the u
`I Full Control. This right enabj
`for, and take ownership of the :
`I Special File Access. This selr
`include Read, Write, Execute 1
`
`N 0 r E Don’t confuse rights with permis
`specific objects.
`173i
`
`On a FAT file system, you can assign
`share permissions to a shared folder
`a FAT file system. Instead, files are sir
`torythat contains them. Perhaps more
`nussrons on directories or files on a F!
`lEoAprowde any degree oflocal protecti<
`T volumes from unauthorized acces
`puter, he can gain access to any folder
`
`BlackBerry Corporation Exhibit 1024, pg. 2
`
`