Communication Networks Fundamentals lab 5 28022021 1 Introduction

ﺍﻷﺘﺼﺎﻝ ﻭ ﺍﻟﺸﺒﻜﺎﺕ ﺃﺴﺎﺳﻴﺎﺕ Communication & Networks Fundamentals lab 5 28/02/2021 1

Introduction to NTFS permissions èWindows 2000 provides NTFS permission on NTFS formatted partitions. ﻋﻠﻰ ﺍﻱ ﺟﺰﺀ ﻣﻦ ﺍﺟﺰﺍﺀ ﺍﻟﻘﺮﺹ ﺍﻟﺼﻠﺐ ﺍﻟﻘﺎﺑﻠﺔ ﻟﻠﺘﻬﻴﺌﺔ NTFS ﻳﺘﻴﺢ ﻋﺪﺩ ﻣﻦ ﺻﻼﺣﻴﺎﺕ Windows è (NTFS formatted partitions) èTo source files and folders on NTFS partitions , you grant NTFS permissions for each user account or group that needs access to the resources. NTFS ﺗﻤﻨﺢ ﺻﻼﺣﻴﺎﺕ NTFS partition ﻟﻜﻞ ﺍﻟﻤﺠﻠﺪﺍﺕ ﻭ ﺍﻟﻤﻠﻔﺎﺕ ﺍﻟﻤﻮﺟﻮﺩﺓ ﻓﻲ ﺍﻱ ﺟﺰﺀ ﻣﻦ 28/02/2021 ( ﻣﺴﺘﺨﺪﻡ ﺍﻭ ﻣﺠﻮﻋﺔ ﺗﺤﺘﺎﺝ ﻟﻠﻮﺻﻮﻝ ﺍﻟﻲ ﻫﺬﻩ ﺍﻟﻤﺼﺎﺩﺭ )ﺍﻟﻤﻠﻔﺎﺕ _ ﺍﻟﻤﺠﻠﺪﺍﺕ 2 ﻟﻜﻞ

NTFS file permissions NTFS folder permission Allows the user to Read the file, and view file attributes , ownership , And permissions Write Overwrite the file, change file attributes , and view files ownership and permissions Read & Execute Run applications and perform the actions permitted by the read permissions Modify and delete the file and perform the actions permitted by the write permission and read and execute permission Full Control Change permissions, take ownership , and perform action permitted by all other NTFS folder permissions 28/02/2021 7

Multiple NTFS permission Folder A Group A write Read/write File 1 user Read File 2 Group B Deny write to file 2 28/02/2021 9

Multiple NTFS permission èIf you grant NTFS permissions to an individual user account in addition to a group to which the user belongs then you have granted multiple permissions to the user. ﺍﺫﺍ ﺗﻢ ﻣﻨﺢ ﺻﻼﺣﻴﺔ ﻟﻤﺴﺘﺨﺪﻡ ﺑﺤﺴﺎﺑﻪ ﺍﻟﺨﺎﺹ ﺑﺎﻻﺿﺎﻓﺔ ﺍﻟﻰ ﻣﻨﺤﻪ ﺻﻼﺣﻴﺔ ﺿﻤﻦ ﻣﺠﻤﻮﻋﺔ ﻳﻨﺘﻤﻲ ﺍﻟﻴﻬﺎ ﻓﻬﻮ ﻓﻲ ﻫﺬﻩ ﺍﻟﺤﺎﻟﺔ ﻟﻪ (Multiple NTFS permission) ﺻﻼﺣﻴﺔ ﻣﺘﻌﺪﺩﺓ 28/02/2021 10

Permissions are cumulative èA user’s effective permissions for a resource are the combination of the NTFS permission that you grant to the individual user account and the NTFS permissions that grant to the groups to which the user belongs. 28/02/2021 12

NTFS permissions inheritance Permission inheritance Read/write Group Folder A Access to File 1 Prevent inheritance user Read/write Group Folder A No access to File 1 File 2 15

Permissions inheritance èWhen you grant NTFS permissions to given access to a folder, you grant permissions for the folder, for any existing files and sub folders, and for any new files and subfolders that are created in the folder. ﻋﻠﻰ ﻣﺠﻠﺪ ﻓﺎﻧﻚ ﺗﻜﻮﻥ ﻗﺪ ﻣﻨﺤﺖ ﻫﺬﻩ ﺍﻟﺼﻼﺣﻴﺔ ﻋﻠﻰ NTFS ﻋﻨﺪﻣﺎ ﻳﺘﻢ ﻣﻨﺢ ﺻﻼﺣﻴﺎﺕ . ﺍﻟﻤﺠﻠﺪ ﻭ ﻛﻞ ﻣﺤﺘﻮﻳﺎﺕ ﺍﻟﻤﺠﻠﺪ ﺍﻟﻤﻮﺟﻮﺩﺓ ﺑﺪﺍﺧﻠﻪ ﻭﺍﻟﺘﻰ ﺳﻴﺘﻢ ﺍﻧﺸﺎﺅﻬﺎ ﻻﺣﻘ ﺑﺪﺍﺧﻠﻪ 28/02/2021 17

Copying and moving files and folders NTFS partition C: / NTFS partition D: / copy NTFS partition Copy or E: / move When you copy files or folders from one folder, to another, or from one partition to another, permissions for the files or folder may change. ( ﺍﻟﻰ آﺨﺮ ﺍﻟﺼﻼﺣﻴﺎﺕ partition) ﻋﻨﺪﻣﺎ ﻳﺘﻢ ﻋﻤﻞ ﻧﺴﺨﺔ ﻣﻦ ﻣﻠﻒ ﺍﻭ ﻣﺠﻠﺪ ﺍﻭ ﻧﻘﻞ ﺍﻟﻤﻠﻒ ﺍﻭ ﺍﻟﻤﺠﻠﺪ ﻣﻦ ﻣﻜﺎﻥ 28/02/2021 19. ﺍﻟﻤﻤﻨﻮﺣﺔ ﻋﻠﻰ ﻫﺬﺍ ﺍﻟﻤﻠﻒ ﺍﻭ ﺍﻟﻤﺠﻠﺪ ﺳﻮﻑ ﺗﺘﻐﻴﺮ

Copying files and folders Coping a file or folders has the following effects on NTFS permissions : ﻧﻘﻞ ﺍﻟﻤﻠﻔﺎﺕ ﺍﻭ ﻋﻤﻞ ﺍﻟﻨﺴﺦ ﻳﻜﻮﻥ ﻟﻪ ﺍﻟﺘﺄﺜﻴﺮ ﺍﻟﺘﺎﻟﻲ è When you copy a folder or file within a single NTFS partition, the copy of the folder or file inherits the permissions of the destination folder. ﻓﺎﻥ ﺍﻟﻨﺴﺨﺔ ﺍﻟﺠﺪﻳﺪﺓ ﺗﺮﺙ ﺻﻼﺣﻴﺎﺕ ﺍﻟﻤﺠﻠﺪ partition ﻋﻨﺪ ﻋﻤﻞ ﻧﺴﺨﺔ ﻣﻦ ﻣﻠﻒ ﺍﻭ ﻣﺠﻠﺪ ﻓﻲ ﻧﻔﺲ ﺍﻝ . ﺍﻟﺬﻱ ﻧﻘﻠﺖ ﺍﻟﻴﻪ èWhen you copy a folder or file between NTFS partitions, the copy of the folder or file inherit the permissions of the destination folder. ﻓﺎﻥ ﺍﻟﻨﺴﺨﺔ ﺍﻟﺠﺪﻳﺪﺓ ﺗﺮﺙ ﺻﻼﺣﻴﺎﺕ ﺍﻟﻤﺠﻠﺪ partition ﻋﻨﺪ ﻋﻤﻞ ﻧﺴﺨﺔ ﻣﻦ ﻣﻠﻒ ﺍﻭ ﻣﺠﻠﺪ ﺑﻴﻦ ﺍﻛﺜﺮ ﻣﻦ . ﺍﻟﺬﻱ ﻧﻘﻠﺖ ﺍﻟﻴﻪ 28/02/2021 20

èWhen you copy a folder or file to non- NTFS partitions such as file allocation table(FAT) , the folder or file lose their NTFS permissions, because non-NTFS partitions do not support NTFS permissions. ﺳﻴﻔﻘﺪ ، FAT ﻣﺜﻞ non-NTFS partition ﻋﻨﺪﻣﺎ ﻳﺘﻢ ﻧﻘﻞ ﺍﻭ ﻧﺴﺦ ﻣﻠﻒ ﺍﻟﻰ ﺍﻟﻤﻠﻒ ﺍﻭ ﺍﻟﻤﺠﻠﺪ ﺟﻤﻴﻊ ﺻﻼﺣﻴﺎﺗﻪ èTo copy files and folders within a single NTFS partition or between NTFS partitions, you must have Read permission for the originating folder and Write permission for the destination folder. ﻟﻨﻘﻞ ﺍﻟﻤﻠﻔﺎﺕ ﺍﻭ ﺍﻟﻤﺠﻠﺪﺍﺕ ﺑﻴﻦ ﺍﻻﻣﺎﻛﻦ ﺍﻟﻤﺨﺘﻠﻔﺔ ﻳﺠﺐ ﺍﻥ ﻳﻜﻮﻥ ﻟﻚ ﺻﻼﺣﻴﺔ ﺍﻟﻘﺮﺍﺀﺓ ﻣﻦ ﺍﻟﻤﺠﻠﺪ ﺍﻻﻭﻝ ﻭﺻﻼﺣﻴﺔ ﺍﻟﻜﺘﺎﺑﺔ ﺍﻟﻤﺠﻠﺪ ﺍﻟﺬﻱ ﺳﻴﻨﺘﻘﻞ ﺍﻟﻴﻪ 28/02/2021 21 ﻓﻲ

Introduction to special NTFS permissions èSpecial access permissions provide you with greater degree of control for granting access to resources. ﺻﻼﺣﻴﺎﺕ ﺍﻟﻮﺻﻮﻝ ﺍﻟﺨﺎﺻﺔ ﺗﻤﻨﺢ ﺩﺭﺟﺔ ﺗﺤﻜﻢ ﺍﻋﻠﻰ ﻟﻤﻨﺢ ﺍﻟﺼﻼﺣﻴﺎﺕ ﻋﻠﻰ . ﺍﻟﻤﺼﺎﺩﺭ 28/02/2021 22

Two of the special access permissions are especially useful for managing access to files and folders: ﻳﻮﺟﺪ ﻧﻮﻋﻴﻴﻦ ﻣﻦ ﺍﻟﺼﻼﺣﻴﺎﺕ ﺍﻟﺨﺎﺻﺔ ﻭﻫﻲ 1. Change permissions : grant this permission to provide a user the ability to change permissions for a file or folder. . ﺗﻤﻨﺢ ﻫﺬﻩ ﺍﻟﺼﻼﺣﻴﺔ ﻟﻠﻤﺴﺘﺨﺪﻡ ﻟﻤﻨﺤﻪ ﺍﻟﻘﺪﺭﺓ ﻋﻠﻰ ﺗﻐﻴﻴﺮ ﺍﻟﺼﻼﺣﻴﺎﺕ ﻋﻠﻰ ﻣﻠﻒ ﺍﻭ ﻣﺠﻠﺪ 2. Take Ownership: Grant this permission to provide a user the ability to take ownership of files and folders. ﺗﻤﻨﺢ ﻫﺬﻩ ﺍﻟﺼﻼﺣﻴﺔ ﺣﺘﻰ ﺗﻤﻜﻦ ﺍﻟﻤﺴﺘﺨﺪﻡ ﺍﻟﻘﺪﺭﺓ ﻋﻠﻰ ﺗﻐﻴﻴﺮ ﻣﻠﻜﻴﺔ ﺍﻟﻤﺠﻠﺪ ﺍﻭ ﺍﻟﻤﻠﻒ 28/02/2021 . 3 23

Change permissions èYou can give other administrators and users the ability to change permissions for a file or folder without giving them the full control permission over the file or folder. ﻳﻤﻜﻨﻚ ﺍﻥ ﻧﻌﻄﻲ ﺑﻌﺾ ﺍﻟﻤﺴﺘﺨﺪﻣﻴﻦ ﺍﻭ ﺍﻟﻤﺪﺭﺍﺀ ﺍﻻﺧﺮﻳﻦ ﺻﻼﺣﻴﺔ ﺍﻣﻜﺎﻧﻴﺔ full ﺗﻐﻴﻴﺮ ﺍﻟﺼﻼﺣﻴﺎﺕ ﻋﻠﻰ ﻣﻠﻒ ﺍﻭ ﺍﻟﻤﺠﻠﺪ ﻭﻣﻦ ﺩﻭﻥ ﻣﻨﺤﻬﻢ ﺻﻼﺣﻴﺔ . ﻋﻠﻰ ﺍﻟﻤﺠﻠﺪ ﺃﻮ ﺍﻟﻤﻠﻒ control èTo give administrators the ability to change permission s, grant the modify permission for a file or folder to the administrators group. ﻟﻤﺠﻤﻮﻋﺔ modify permission ﻟﻤﻨﺢ ﺍﻟﻤﺪﺭﺍﺀ ﺍﻟﻤﻘﺪﺭﺓ ﻋﻠﻰ ﺗﻐﻴﻴﺮ ﺍﻟﺼﻼﺣﻴﺎﺕ ﻳﺘﻢ ﻣﻨﺢ ﺻﻼﺣﻴﺔ 28/02/2021 24 ﺍﻟﻤﺪﺭﺍﺀ

Take ownership èYou can give someone the ability to take ownership or, as an administrator , you can take ownership of file or folder. . ﻳﻤﻜﻨﻚ ﺍﻥ ﺗﻤﻨﺢ ﺻﻼﺣﻴﺔ ﺍﺧﺬ ﺍﻟﻤﻠﻜﻴﺔ ﻻﻱ ﺷﺨﺺ ﺍﻭ ﻛﻤﺪﻳﺮ ﻳﻤﻜﻨﻚ ﺍﺧﺬ ﻫﺬﻩ ﺍﻟﺼﻼﺣﻴﺔ The following rules apply for taking ownership of a file or folder: : take ownership ﻳﺠﺐ ﻣﺮﺍﻋﺎﺓ ﺍﻟﻘﻮﺍﻋﺪ ﺍﻟﺘﺎﻟﻴﺔ ﻋﻨﺪ ﺍﻟﺘﻌﺎﻣﻞ ﻣﻊ ﺻﻼﺣﻴﺔ 1. The current owner or any user with full control permission can grant the full control standard permission or take ownership to another user account or group. ﺍﻭ take ownership ﻳﻤﻜﻨﻪ ﻣﻨﺢ ﺻﻼﺣﻴﺔ full control ﺍﻟﻤﺎﻟﻚ ﺍﻟﺤﺎﻟﻲ ﺍﻭ ﺍﻱ ﺷﺨﺺ ﻟﻪ ﺻﻼﺣﻴﺔ 25 group ﻟﺤﺴﺎﺏ ﻣﺴﺘﺨﺪﻡ آﺨﺮ ﺍﻭ full control ﺻﻼﺣﻴﺔ

2. A member of the administrators group can take ownership of a folder or file , regardless of granted permissions for that folder or file. Any member of administrators group can change the permissions for the file or folder and grant the take ownership permission to another user account or group. ﻋﻠﻰ ﻣﻠﻒ ﺍﻭ ﻣﺠﻠﺪ ﺑﻐﺾ ﺍﻟﻨﻈﺮ ﻋﻦ Take ownership ﻳﻤﻜﻨﻪ ﺍﺧﺬ ﺻﻼﺣﻴﺔ administrator group ﺍﻟﻌﻀﻮ ﻓﻲ ﻳﻤﻜﻨﻪ ﺍﻥ ﻳﻐﻴﻴﺮ ﻓﻲ ﺻﻼﺣﻴﺎﺕ ﺍﻟﻤﻠﻒ administrator group ﻭﺍﻱ ﻋﻀﻮ ﻓﻲ ﺍﻝ. ﺍﻟﺼﻼﺣﻴﺎﺕ ﺍﻟﻤﻤﻨﻮﺣﺔ ﻋﻠﻰ ﺍﻟﻤﺠﻠﺪ ﺍﻭ ﺍﻟﻤﻠﻒ . group ﻻﻱ ﻣﺴﺘﺨﺪﻡ ﺍﻭ take ownership ﺍﻭ ﺍﻟﻤﺠﻠﺪ ﺍﻭ ﻳﻤﻨﺢ ﺻﻼﺣﻴﺔ Note: To become the owner of a file or folder, a user or a group member with take ownership permission must explicitly take ownership of the file or folder. You cannot automatically grant anyone ownership of a file or folder take ﺻﻼﺣﻴﺔ group ﻻﺧﺬ ﺻﻼﺣﻴﺔ ﻣﻠﻜﻴﺔ ﺍﻟﻤﻠﻔﺎﺕ ﺍﻭ ﺍﻟﻤﺠﻠﺪﺍﺕ ﻳﺠﺐ ﺍﻥ ﻳﻤﻨﺢ ﺍﻟﻤﺴﺘﺨﺪﻡ ﺍﻭ ﺍﻝ ﺑﺸﻜﻞ ﻭﺍﺿﺢ ﻭﻻ ﻳﻤﻜﻦ ﺍﺧﺬ ﻫﺬﻩ ﺍﻟﺼﻼﺣﻴﺔ ﺑﺸﻜﻞ ﺍﻭﺗﻮﻣﺎﺗﻴﻜﻲ ownership 28/02/2021 26

ﻣﻦ ﺍﻟﺬﻱ ﻳﺤﻖ ﻟﻪ ﺍﻋﻄﺎﺀ ﺍﻟﻤﻠﻜﻴﺔ Ownership? èThe owner of file èMember of administrator group. èAny one with full control permission. 28/02/2021 27