Shulou(Shulou.com)05/31 Report--

Today, I will talk to you about how to analyze the permissions of NTFS. Many people may not know much about it. In order to make you understand better, the editor has summarized the following contents for you. I hope you can get something according to this article.

Some definitions of the D file system:

-- NTFS security permissions--

Folder's ACL--- folder properties-Security-Advanced-permission item contains the access control list for the folder. Permissions match from top to bottom.

There are four types of documents with permissions

Inheritance-

Create a folder on the d: disk. The permissions of the folder are inherited from the permissions of the d disk. When we assign permissions to a folder

This permission is assigned to all subfolders and files under the folder

Document, do you want to inherit permissions from your higher level-right-click it, click Properties-Security-Advanced-permissions-change permissions-uncheck "including permissions that can be inherited from the object's parent".

Folder do you want to inherit permissions from your higher level-right-click it, click Properties-Security-Advanced-permissions-change permissions-there are two options here

1, including access available from.-does not inherit permissions from your higher level.

2. Use the.-let all the sub-objects below inherit their own permissions

Permission accumulation-permissions that the user does not have, the group has, but if the user is in the group again, then the user inherits the group's control over the folder

Deny priority-a user has access to the folder, but the user is in another group, and the group does not have access to the folder, so a does not have access to the folder

Access to the folder.

There is a "special permission" in the folder properties-security-for more subdivision of permissions. Operation: advanced-Select a user or group in the permission project-Edit

Experiment:

Ask about

1, how to assign a size to a folder beyond which it cannot be written.

Quota-- Click D disk Properties-- quota-- "enable."reject." Check, the following two also check-quota entry-add users

Users can see how much permission they have after adding a mapping disk.

Experimental operation:

Shared public folder-permission is "everyone"-read / write.

Attribute-Security-Advanced-first remove the inherited permissions of the above three folders and remove the everone in the permission project. Delete the original upper-level permission

HR--- attribute-Security-Edit-add Allen to it.

By default, when Allen enters the public folder, you can only see the HR folder. If you want to see other folders, you can set up here-go to the shared computer-turn on sharing and storage management-click the public property-set "start based on access...." Uncheck it.

Clear the shared connection cache: cmd---net use * / del / y

View the number of shared connections: net session

Establishing Hidden user method in Win7

Step / method 1

First, open "computer Management"

Create the users you need. I don't want this user to appear on your machine's login interface, so what should I do? We can make them hidden by modifying the registry.

two

Press "CTRL+R" type "regedit.exe" to open the registry editor.

three

Locate the key "HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\ Winlogon" in the registry and add a subkey under it

"\ SpecialAccounts\ UserList".

four

Under "Userlist", add the DWORD that you want to hide the user name.

-the file grabs the owner's rights-

Linda put a file in his folder, which removes the permissions of system and administrator, and only he can access it.

The administrator does not have permission to access the number of pages, but the administrator can seize the permission-click on the folder (folder that does not have permission to access) properties-security-advanced-

Owner-editor-current owner changed to administrator application-and then add their own permissions.

File compression-file properties-general-advanced-compression: the folder turns blue after compression.

Efs folder encryption-General-Advanced encryption (08server default administrator can see it)

Bitlocker folder encryption

Fault tolerance of File Server

1 cluster (cluster)-use clustering for file server fault tolerance. (study reference, UNOCI-windows 2008 R2 classic case video -)

(1) the ad architecture must be required.

(2) it must be the data center version and enterprise version of R2 and can support 16-node clusters.

(3) when implementing cluster, the server has at least 2 network cards.

(4) the structure of the cluster requires the company to have storage (san), and the purchase needs more than one hundred thousand yuan.

(5) there are two modes of cluster implementation (a _

2DFS (distributed file system) 2003 does not have this function, and the dfs function is enabled so that users only need to access an interface to access folders shared by other servers.

Achieve:

1. Add the "file service" function to the server role

two。 Role-right click on File Server-add role Service-Select dfs Namespace-next step-install

3. Start-Management tool-dfs....

4. Right-click to create a new namespace-- 08server1 (the name of the current server)-- yyy (the name of the namespace and settings)-the next step is complete.

5. Once created, there is a folder under disk C that starts with DFS and contains all shared folder path directories.

6. Start-- Administrative tools-- next level of the dfs--- namespace-right-click to add folders-add folder paths shared by various servers (various servers refer to servers on the network)

7. Access\ 08server1\ yyy on the client side. There will be various server shares just created.

Unc path: "\". Dfs has a three-tier architecture, as shown in figure server1.

Shared file fault tolerance, file synchronization. (90 points)

Install the dfs namespace on server A, dfs replication on server B, and dfs replication on server C. Create two paths to the same folder yyy on server A (yyy is shared on both An and B)

Create a user:

Net user account name password / add

Activate a disabled user

Net uesr account name / active:yes

Join the administrators group

Net localgroup administrators account name / add

1Magnet user abcd 1234 / add, create a new account with a user name of abcd and a password of 1234. Default is a member of the user group.

2Magnet user abcd / del, delete the user whose user name is abcd.

3Maginnet user abcd, check the situation of the user whose user name is abcd.

4Jing net user abcd / active:no, disable the user whose user name is abcd.

5Magnet user abcd / active:yes, activating the user with the user name abcd.

6Jing net localgroup administrators abcd / add to upgrade the user whose user name is abcd to administrator privilege.

2008 R2 manage users and groups

Password policy

Windows platform: company business platform, mail, oa,ad

Linux platform: web, large data processing and storage platform

=

Microsoft Business Software deployment Information

NTFS (Windows): supports maximum partition 2TB and maximum file 2TB

FAT16 (Windows): supports maximum partition 2GB and maximum file 2GB

FAT32 (Windows): supports maximum partition 128GB and maximum file 4GB

HPFS (OS/2): supports maximum partition 2TB and maximum file 2GB

EXT2 and EXT3 (Linux): support maximum partition 4TB, maximum file 2GB

JFS (AIX): supports maximum partition 4p (block size=4k), maximum file 4p

XFS (IRIX): this is a serious 64-bit file system that can support 9e (2 to the 63rd power) partition

Windows: server client:90%

Linux:redhat,suse.ubuntu,redflag

Unix:aix

Windows server: the company's business platform mail,ad.

Linux,unix:web server, a platform for large data processing and storage.

There are six versions of server R2

First, the Standard Edition (se): contains most of the features in windows server. Be able to use most of the company's servers, such as dc,dhcp,web,dns,htp.

Compared with the enterprise version, the standard version has the following differences

1) the standard version only supports 32GB memory. Enterprise 2TB (without). (with supports 1T)

2) if the customer service server needs to be clustered, be sure not to select the standard version. (sql server,exchange,mailbox)

Second, ee: includes all the features of windows server2008 R2, but compared to the data center version, note the following two points

1) the data center version supports larger hardware.

2) 4 vm (virtual machine) and 1 vm are available free of charge for Enterprise Edition and Standard Edition. The data center edition can use vm without limit.

Third, data Center Edition (de): the most powerful version.

Fourth, web version (we): mainly provides operating system platform and basic system services for web servers of small and medium-sized enterprises

Fifth, Anteng version: mainly for Anteng cpu operating system platform, can support Anteng cpu software is very few, it is not recommended to buy.

Sixth, fundation version: mainly for branch offices to provide the operating system, the number of less than 15 people, the price is 1000 (server authorization + 15cal), the fundation version can only be purchased through oem manufacturers.

R2 server installation, starting from 2008, there are full installation (traditional interface) and core installation server Core (no interface-command configuration)

Windows Server 2008 maximum memory limit:

Windows Server 2008 x86

WindowsServer 2008 Standard Edition, supports maximum 4GB memory

Windows Server 2008 Enterprise Edition, supporting maximum 64GB memory

Windows Server 2008 data Center Edition, supporting maximum 64GB memory

Windows Server 2008 x64 with or without Hyper-V Role Enable

Windows Server 2008 Standard Edition, supports maximum 32GB memory

Windows Server 2008 Enterprise Edition, supporting maximum 1TB memory

Windows Server 2008 data Center Edition, supporting maximum 1TB memory

Windows Server2008 R2 maximum memory limit:

Windows Server 2008 R2 with Hyper-V Role Enable

Windows Server 2008 R2 Standard Edition (standard) with maximum support for 32GB memory

Windows Server 2008 R2 Enterprise Edition (enterprise) with maximum support for 1TB memory

Windows Server 2008 R2 data Center Edition with maximum support for 1TB memory

Windows Server 2008 R2 without Hyper-V Role Enable

Windows Server 2008 R2 Standard with maximum support for 32GB memory

Windows Server 2008 R2 Enterprise Edition, supporting up to 2TB memory

Windows Server 2008 R2 data Center Edition with maximum support for 2TB memory

After reading the above, do you have any further understanding of how to analyze the permissions of NTFS? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.