Configuring

Resource Access
Module 5

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 1
 Learning Objectives (1 of 2)

After completing this module you should be able to:

• Describe the use and configuration of folder and file attributes
• Identify the permissions available for NTFS and ReFS folders and
files
• Configure file ownership, permissions, and auditing
• Share folders using SMB and NFS

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 2
 Learning Objectives (2 of 2)

After completing this module you should be able to:

• Publish shared folders to Active Directory
• Implement DFS namespaces to simplify shared folder access
• Configure DFS replication to synchronize folder contents
• Restrict content using user quotas, folder quotas, and file screens

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 3
 Configuring Folder and File Attributes

• Attributes
− Features of a folder or file that are used by a filesystem
• Metadata
− Stores information about a folder or file
− Stores attributes
− Stores ownership, permissions, date of creation, and time of last access
characteristics

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 4
 Working with Basic Attributes (1 of 3)

• Filesystems supported by Windows Server 2019

− NTFS, ReFS, FAT32, and exFAT
• Common attributes: read-only and hidden
• View and set attributes
− Right-click a folder or file within a File Explorer window and click Properties
• Affects of read-only attribute on a file
− Changes to its contents cannot be saved to the same file name
− Cannot be deleted using a command (can be deleted within File Explorer)
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 5
 Working with Basic Attributes (2 of 3)

• Affect of read-only attribute on a folder

− It applies to existing files within the folder only, not the folder itself
• Hidden attribute prevents users from listing the folder and file names
− Can override with commands or in the File Explorer
 dir /ah MS-DOS command
 Get-ChildItem –hidden Windows PowerShell command

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 6
Working with Basic Attributes (3 of 3)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 7
 Working with Advanced Attributes (1 of 4)

• Advanced attributes
− Archive, index, compress, and encrypt
• Archive attribute
− Indicates the folder or file needs to be backed up
− Automatically enabled on files
− Not automatically enabled on folders
− Can manually set the archive attribute on all files within a folder
− Backup software removes the archive attribute following the backup process

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 8
Working with Advanced Attributes (2 of 4)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 9
 Working with Advanced Attributes (3 of 4)

• Index attribute
− Index: pre-created list used in searching
− Commonly accessed user folders indexed by default
− System folders excluded to reduce index size for speed
− Files with index attribute set are indexed by the Windows Search Service
− All new files have the index attribute by default
− Can deselect the index attribute for a file or folder

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 10
 Working with Advanced Attributes (4 of 4)
• Compress attribute
− System compresses the file on the filesystem
− Automatically decompresses it when accessed
− Changes to the file are compressed before being written to the filesystem
• Encrypt attribute
− Applies encryption algorithm to protect data before it is written to filesystem
− Symmetric encryption (uses one key) and asymmetric encryption (uses
public and private keys)
− Encrypting File System (EFS) works within a workgroup or Active Directory
domain environment
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 11
 Windows Permissions
Architecture
• Access Control List (ACL)
• Access Control Entries (ACEs)
• Security principal Permission

ACL
Sales – Read
Managers – Full ACEs
Control
JSmith – Deny
Access

Folder
Folder

Security Principal

© 2013 John Wiley & Sons, Inc. 12

 Managing Folder and File Security

• Need to modify resource access control lists (ACLs) and set up sharing
• Discretionary access control list (DACL)
− Permissions given to user and group accounts
− Used to grant or deny access to the resource
• System access control list (SACL)
− Contains information used to audit the access to the resource
• User who creates resource owns the resource
− Owners can change folder and file ownership, configure DACLs and SACLs
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 13
 Configuring Folder and File Permissions
(1 of 8)
• To view and configure DACL for an NTFS or ReFS filesystem folder or file
− Open File Explorer, right-click a folder or file, click Properties
− The file Properties window opens: highlight the Security tab
 Basic folder and file permissions supported by NTFS and ReFS display
 SYSTEM group is allowed Full control permission
 Grey permissions are inherited from parent folder containing the file
− Click Edit to open the Permissions windows
 Can add or remove existing users or groups and set basic permissions

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 14
 Configuring Folder and File Permissions
(2 of 8)
Table 5-1: NTFS/ReFS folder
and file permissions
Permission Description Applies to

Full control Can read, add, delete, execute, and modify files, change permissions and Folders and files
attributes, and take ownership
Modify Can read, add, delete, execute, and modify files; cannot change permissions Folders and files
or take ownership
Read and execute Implies the capabilities of both List folder contents and Read (traverse Folders and files
folders, view file contents, view attributes and permissions, and execute
files)
List folder contents Can list (traverse) files in the folder or switch to a subfolder, view folder Folders only
attributes and permissions, and execute files; cannot view file contents
Read Can view file contents, as well as view file and folder attributes and Folders and files
permissions; cannot traverse folders or execute files
Write Can create files, write data to files, append data to files, create folders, and Folders and files
modify folder and file attributes; cannot delete files
Advanced permissions Advanced permissions apply (see Table 5-2) Folders and files

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 15
Configuring Folder and File Permissions
(3 of 8)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 16
 Configuring Folder and File Permissions
(4 of 8)
Table 5-2: NTFS folder and file
advanced permissions
Permission Description Applies to

Can read, add, delete, execute, and modify files, as well as change
Full control Folders and files
permissions and attributes, and take ownership

Traverse folder/execute file Can list the contents of a folder and run program files in that folder Folders and files

Can list the contents of folders and subfolders and read the contents of
List folder/read data Folders and files
files
Read attributes Can view the read-only and hidden attributes Folders and files

Read extended attributes Can view extended attributes (archive, index, compress, and encrypt) Folders and files

Create files/write data Can add new files to a folder and modify, append to, or write over file Folders and files
contents
Create folders/append data Can add new folders and add new data at the end of files, but otherwise Folders and files
cannot delete, write over, or modify data

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 17
 Configuring Folder and File Permissions
(5 of 8)
Table 5-2: NTFS folder and file
advanced permissions
Permission Description Applies to

Write attributes Can add or remove the read-only and hidden attributes Folders and files

Write extended attributes Can add or remove the archive, index, compress, and encrypt attributes Folders and files

Can delete subfolders and files (the following Delete permission is not
Delete subfolders and files Folders and files
required)
Can delete the specific subfolder or file to which this permission is
Delete Folders and files
attached
Can view the permissions (DACL) associated with a folder or file, but
Read permissions Folders and files
cannot change them

Change permissions Can change the permissions associated with a folder or file Folders and files

Can take ownership of the folder or file (read permissions and change
Take ownership Folders and file
permissions automatically accompany this permission)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 18
 Configuring Folder and File Permissions
(6 of 8)
• More advanced permissions provide a specific type of access
− Open the File Properties window: highlight the Security tab
− Click Advanced to open the Advanced Security Settings window
 Click Add to access the Permission Entry window to add advanced
permissions
 Can click Disable inheritance to prevent parent folder permissions from
being inherited by the file being edited

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 19
Configuring Folder and File Permissions
(7 of 8)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 20
Configuring Folder and File Permissions
(8 of 8)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 21
 Configuring Folder and File Ownership

• Folder or file has one owner

− Default owner is the creator
− Owner can change the ownership to another user
• User with Take ownership advanced permission or Full control permission to a
folder or file
− Can change the owner to be themselves
• To modify the owner of a folder or file
− Access the Advanced Security Settings window
 Click Change next to the current owner, and specify the new owner
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 22
Troubleshooting Folder and File Permissions

• Example: User receives an access denied message for a folder because their
user account is also a member of a group that has been denied
− Two troubleshooting techniques
 Review permissions assigned on the folder to the user, and all groups to
which the user belongs, taking permission inheritance into consideration
 Access the Advanced Security Settings window for the folder and
highlight the Effective Access tab
 Click Select a user to choose the appropriate user account, and then
click View effective access to list the effective permissions the user has
• Permission-related problems can occur after a file or folder is copied or moved
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 23
 Configuring Folder and File Auditing
(1 of 3)
• Audit configuration stored within the SACL on the folder or file
• Configure auditing with the Auditing Entry window
• Auditing is not enabled on Windows Server 2019 by default
• To enable auditing functionality
− Edit the audit policy within a Group Policy object that applies to a computer
− Within Active Directory environment
 Edit the Default Domain Policy object settings to enable auditing
functionality on every computer within the domain

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 24
Configuring Folder and File Auditing
(2 of 3)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 25
Configuring Folder and File Auditing
(3 of 3)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 26
 Sharing Folders
Shared
Shared
Share Permissions
Folder
Folder
FC
Everyone File A
NTFS Permissions

R
File B
NTFS Permissions

FC

NTFS Volume

© 2013 John Wiley & Sons, Inc. 27

 Configuring Shared Folders

• Shared folder
− Allows users to access the files within the folder from across a network
• Two protocols for sharing folders on Windows Server 2019 systems
− Server Message Block (SMB)
− Network File System (NFS)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 28
 Sharing Folders Using SMB (1 of 14)

• SMB is enabled by default

• PC can be set to be discoverable by other PCs at installation time
• Can enable or disable SMB sharing for current network profile
• Can modify SMB sharing settings using the Network and Sharing Center
− Click Change advanced sharing settings

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 29
Sharing Folders Using SMB (2 of 14)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 30
 Sharing Folders Using SMB (3 of 14)

• Sharing a folder using folder properties

− Right-click the folder, click Properties, and highlight the Sharing tab
− Click the Share button to see the Network access window
 Specify user or group name, click Add, and specify the permission level
for the shared folder
− Or click the Advanced Sharing button, then select Share this folder within the
Advanced Sharing window
 Specify share name, limit simultaneous connections to the shared folder,
supply a description or click the Permissions button
− Caching button allows configuration of SMB offline file caching features
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 31
Sharing Folders Using SMB (4 of 14)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 32
Sharing Folders Using SMB (5 of 14)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 33
Sharing Folders Using SMB (6 of 14)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 34
Sharing Folders Using SMB (7 of 14)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 35
Sharing Folders Using SMB (8 of 14)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 36
 Sharing Folders Using SMB (9 of 14)

• Sharing a folder using Server Manager

− Open File and Storage Services within the navigation pane
 Click Shares, select the Tasks drop-down box, click New Share
− Starts the New Share Wizard
 Select the desired SMB File share profile option
 Supply the share name and optional share description
 Configure the optional share features
 Modify the NTFS/ReFS permissions on the folder to match the desired
level of access for groups and users
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 37
Sharing Folders Using SMB (10 of 14)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 38
Sharing Folders Using SMB (11 of 14)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 39
Sharing Folders Using SMB (12 of 14)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 40
Sharing Folders Using SMB (13 of 14)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 41
Sharing Folders Using SMB (14 of 14)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 42
 Sharing Folders Using NFS (1 of 7)

• Need to install the Server for NFS server role

• Sharing a folder using folder Properties
− Open the NFS Advanced Sharing window
− NFS shared folder authentication options for UNIX, Linux, macOS, and
Windows users within the Active Directory domain
 Kerberos options allow three forms of Kerberos authentication
 Options allow access by passing UID and GID to the server
 Can force users to connect as the Guest account if not configured to use
Kerberos
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 43
 Sharing Folders Using NFS (2 of 7)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 44
 Sharing Folders Using NFS (3 of 7)

• Sharing a folder using folder Properties (continued)

− Connection to an NFS shared folder requires shared folder permissions
− NFS shared folder permissions granted to computers - not users
− Two levels of access for computers
 Read-Only
 Read-Write
− Default permission assigns Read-Only NFS share permission to all
computers
− Users use operating system-specific commands to access the shared folder
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 45
 Sharing Folders Using NFS (4 of 7)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 46
 Sharing Folders Using NFS (5 of 7)

• Sharing a folder using Server Manager

• Server Manager Shares section can create and manage NFS shared folders
− New Share Wizard shared folder creation options (Quick and Advanced)
− NFS Share – Quick
 Provide location and share name
 Select authentication methods used when connecting to the NFS share
 Add NFS shared folder permission entries for computers on the network
 Modify NTFS/ReFS permissions to match the desired level of access for
groups and users
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 47
 Sharing Folders Using NFS (6 of 7)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 48
 Sharing Folders Using NFS (7 of 7)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 49
 Publishing a Shared Folder in Active
Directory (1 of 3)
• Steps to publish a shared folder to the Active Directory database
− Right-click an OU within the Active Directory Users and Computers tool
− Click New, Shared Folder
− Opens a New Object – Shared Folder window
 Supply the name and UNC path to the SMB or NFS shared folder
 Click OK to create a shared folder object within the associated OU
− Domain users can search Active Directory for shared folders using File
Explorer

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 50
Publishing a Shared Folder in Active
Directory (2 of 3)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 51
Publishing a Shared Folder in Active
Directory (3 of 3)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 52
 Implementing Distributed File System

DFS used for accessing and managing content on file servers

− Two server roles: DFS Namespaces and DFS Replication
• Each sever role works independently of the other
• Each server role managed using the same DFS Management tool
• Install DFS Namespaces and DFS Replication roles
− Use the Add Roles and Features Wizard in Server Manager

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 53
 Configuring DFS Namespaces (1 of 6)

• Open Server Manager and select DFS Management from the tools menu
− Click New Namespace within the Actions pane
• Start the New Namespace Wizard
− Specify the name of the server that will host the DFS namespace
− Specify the shared folder name for the DFS namespace
− Specify the namespace type
− Click Create to create the DFS namespace
− Add a target to a DFS namespace within the DFS Management tool

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 54
Configuring DFS Namespaces (2 of 6)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 55
Configuring DFS Namespaces (3 of 6)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 56
Configuring DFS Namespaces (4 of 6)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 57
Configuring DFS Namespaces (5 of 6)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 58
Configuring DFS Namespaces (6 of 6)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 59
 Configuring DFS Replication (1 of 5)

• Server Manager DFS Management tool, click Start New Replication Group
− New Replication Group wizard starts and user adds appropriate settings
• If configuring DFS namespace and a target contains more than one UNC
− Replicate Folder Wizard starts and user adds appropriate settings
 Define replication group and folder name
 Verify replicated folders
 Select primary server for file overwrite
 Select the DFS replication topology
 Define replication group schedule and bandwidth and create
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 60
Configuring DFS Replication (2 of 5)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 61
Configuring DFS Replication (3 of 5)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 62
Configuring DFS Replication (4 of 5)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 63
Configuring DFS Replication (5 of 5)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 64
 Implementing Quotas and File Screens

• Need for restrictions

− Prevents users from consuming too much space on the file server
− Blocks users from adding the wrong type of files to shared folders
• Three NTFS features for restricting content
− User quotas, folder quotas, file screens
• Install File Server Resource Manager server role on the file server
− Required before configuring folder quotas and file screens

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 65
 Configuring User Quotas

• Enable NTFS quotas for a filesystem

− Right-click the root folder of a filesystem (e.g., C:\) within File Explorer
− Click Properties, highlight the Quota tab, and select the appropriate options
− Click the Quota Entries button
 Provide specific quota options for individual users and groups that
override the default options
• Administrators group members receive no limits

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 66
 Configuring Folder Quotas (1 of 3)

• Two types: hard quotas and soft quotas

• File Server Resource Manager tool
− File Quota Management section contains two subsections
 Quotas and Quota Templates
• Create a new folder quota by highlighting Quotas folder
− Click Create Quota within the Actions pane, specify folder path and settings
− Can modify settings using the Custom Properties button
− Can select a pre-configured template and can save quota settings in a new
quota template
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 67
 Configuring Folder Quotas (2 of 3)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 68
 Configuring Folder Quotas (3 of 3)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 69
 Configuring File Screens (1 of 2)

• Two types: active screening and passive screening

• File Server Resource Manager tool
− File Screening Management section contains three subsections
 File Screens, File Screen Templates, and File Groups
• Create a new file screen by highlighting File Screens folder
− Click Create File Screen within the Actions pane, specify folder path and
settings
− Can modify settings using the Custom Properties button
− Can select pre-configured property templates
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 70
 Configuring File Screens (2 of 2)

Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 71
 Summary

• Start with configuring folders and attributes (basic and advanced)

• Need to manage folder and file security (ACLs, DACLs, SACLs)
• Need to configure folder and file permissions, and audit
• DFS used for accessing and managing content on file servers
• Two types of file sharing: SMB and NSF
• Two server roles
− DFS Namespaces and DFS Replication
• Configurations needed for user quotas, folder quotas, and file screens
Eckert/triOS College, Hands-On Microsoft Windows Server, 3rd Edition. ©2021 Cengage. All Rights Reserved. May not be scanned, copied or duplicated, or posted to a publicly accessible website, in whole
or in part. 72