Lesson 03

Configuring File Access

and Printers on
Windows® 7 Clients
Module Overview
• Overview of Authentication and Authorization

• Managing File Access in Windows 7

• Managing Shared Folders

• Configuring File Compression

• Managing Printing
Lesson 1: Overview of Authentication and Authorization
• What Are Authentication and Authorization?

• Authentication and Authorization Process

• New Authentication Features in Windows 7

What Are Authentication and Authorization?

Are you on the list?

Who are you?
Authorization: Determining
Authentication: Verifying whether something or someone has
the identity of something permission to access a resource
or someone

User Resource

What does the list say you can do?

Access: Determining what actions

something or someone can perform on
the resource based on permission levels
Authentication and Authorization Process

Windows authentication methods include:

Windows
Authentication Description
Method
Kerberos version 5 Used by Windows 7 clients and servers running
protocol Microsoft Windows Server 2000 or later
Used for backward compatibility with computers
NTLM running pre-Windows 2000 operating systems and
some applications

Certificate mapping Certificates are used as authentication credentials

New Authentication Features in Windows 7

Biometrics
Smart Cards
Online Identity Integration
Windows Biometric Framework (WBF) provides
 A new card-related
support
Smart group policy Plug
setting
for fingerprint andisPlay
biometricavailable
devicesthat controls
through a
the set
new ability of online IDs to authenticate to a computer
of components

AKerberos
common API facilitates development of applications
 Online IDssupport
can be for
usedSmart card logon
to identify individuals within a
 using biometrics
network
Encrypt removable media using BitLocker and using
 Through
the a new
Smart card Control
option Panel item,
to unlock theusers can control
drive
 the availability and use of biometric devices to an
Users must link their Windows user account
online ID to facilitate authentication
 Document and e-mail signing
Device Manager support for managing drivers for
 biometric devices
Authentication occurs through the use of certificates
Used with line-of-business applications to enable
 certificate
Group Policyuse with no
settings to additional middleware
enable, disable, or limit the
 Does not affect domain accounts or local user
use of biometric data for a local computer or domain
 accounts from logging on to the computer
Lesson 2: Managing File Access in Windows 7
• What Are NTFS Permissions?

• What Is Permission Inheritance?

• Impact of Copying and Moving Files and Folders on Set

Permissions
• What Are Effective Permissions?

• Discussion: Determining Effective Permissions

What Are NTFS Permissions?

NTFS file and folder permissions

Define the type of access granted to a user,
group, or computer for a file or folder
What Is Permission Inheritance?
When
Explicit PermissionUser
Permission: Inheritance
creates a is
fileblocked
or folder and
assigns permissions

Allow Read;
Deny Write

Perform one of the following:

• Copy existing group or user permissions to the

Inherited Permission: File or folder permissions for a
child file or folder
child object default from its parent
• Start with blank permissions on the child file or
folder and configure a unique set of
Allow Read;
permissions
Allow Write
Impact of Copying and Moving Files and Folders
on Set Permissions

Allow Read NTFS Partition E:\

NTFS Partition C:\
Deny Write
NTFS Partition C:\Full Control Copy or Move Allow Read
WhenDeny you
Copy orWrite copy or

Move
move a file or folder
within an NTFS
Allow Read partition…
Deny Write
When you copy or move a file or folder to a
different NTFS partition…

Thefile
The fileororfolder
folderinherits
inheritspermissions
permissionsfrom
fromthe
the new
 destination
parent folder folder

 When moving a file or folder that has explicitly

assigned permissions, those permissions are retained in
addition to the newly inherited permissions
What Are Effective Permissions?
Effective permissions are a file or folder’s final, combined
permission set that is determined by Windows 7 when a file or
folder contains both user and group permissions.

When determining effective permissions:

• User and group permissions are combined

• Deny permissions override allow permissions

The Effective Permissions feature:

• Calculates and displays the permissions granted to a user or group

• Determines all domain and local groups in which the user is a

member
• Takes into account permissions inherited from the parent object
Discussion: Determining Effective Permissions

• Users group has

1 Write for Folder1 NTFS Partition
• Sales group has
Read for Folder1 Users
Group
Folder1
• Users group has
2 Read for Folder1
File1
• Sales group has User1
Write for Folder2

Folder2
• Users group has
3 Modify for Folder1
• File2 must only be File2
available to Sales
group with Read Sales Group
permission
Lesson 3: Managing Shared Folders
• What Are Shared Folders?

• Methods of Sharing Folders

• Discussion: Combining NTFS and Share Permissions

• The Network and Sharing Center

What Are Shared Folders?

Shared folders are folders that allow network access to

their content

You can share folders, but you cannot share individual files

The default shared folder’s permission is Full Control for the user
that shared the folder

Folders can be shared:

• In the MMC console using the Share’s snap-in
• In Windows® Explorer®
• Through the command line using the Net Share command
• Through Computer Management
Methods of Sharing Folders
Advanced
Public Sharing
BasicFolder
Sharing
Sharing
  Allows
 Configure
Multiple simultaneous
youPublic
default to share connections
folders
folders quickly
for each computer
Basic Sharing

 Choose
 You
Files share
Advanced name
Sharing
configure
shared with permissions
same computer

 Public Folder Sharing

 Configure permissions
Files shared with same network

 Configure
 caching
Access controlled by permissions
 Discussion: Combining NTFS and Share Permissions
1. If ayou
When user create
is assigned Full Control
a shared NTFSon
folder permission
an NTFS to a file but is accessing
formatted the
partition,
bothfile through
the shareda share withpermissions
folder Read permission, what
and thewillNTFS
be thefile
effective
system
permission are
permissions the user will haveto
combined on secure
the file? file resources.

2. If you want a user to view all files in a shared folder but you can modify only
By files
certain default,
in thethe Everyone
folder, group is granted
what permissions the
would you shared folder
give?
 permission Read

3. Identify a scenario at your organization in which you may have to combine

NTFSUsers must have the appropriate NTFS permissions for each
and Share permissions. What is the reason for combining permissions?
file and subfolder in a shared folder and the appropriate shared
folder permissions to access those resources

The share permissions on a folder apply to that folder, to all

 files in that folder, to sub folders, and to all files in those
subfolders

10 min
When NTFS and shared folder permissions are combined, the
 resulting effective permission is the most restrictive one of
the two permission sets
 The Network and Sharing Center
The Network and Sharing Center provides services to view,
configure, and troubleshoot your network access and sharing
capabilities

Provides centralized control of network features

• Network Map

• Network Location – private, public, domain

• Network Discovery

Controls sharing capabilities related to various network resources:

• File sharing

• Public folder sharing

• Printer sharing

• Media sharing
Lesson 4: Configuring File Compression
• What Is NTFS File Compression?

• Impact of Moving and Copying Compressed Files and Folders

• What Are Compressed (Zipped) Folders?

• Demonstration: Compressing Files and Folders

What Is NTFS File Compression?

• NTFS file compression is the method used by the NTFS file

system to compress files, folders, and volumes
• Uses compression to save disk space
File prior to
• Does not use compression compression
for system files and folders
• Compression is configured as
an NTFS attribute
• NTFS calculates disk space
based on uncompressed
file size
• Applications that open a
compressed file only see the
uncompressed data
File after
compression
Discussion: Impact of Moving and Copying
Compressed Files and Folders

A Within an NTFS Partition B Within an NTFS Partition

Copy Move

Inherits compression Retains its original

state of the target folder compression state

C From NTFS Partitions To NTFS Partitions

Copy

Mov Inherits compression

e state of the target folder

D From NTFS Partition To FAT Partition

Copy

No Compression
Move
 What Are Compressed (zipped) Folders?
Compressed folders can contain multiple files and folders that
are compressed to reduce the overall storage space for the
content

A compressed folder with a .zip

extension is created. Note the reduced
file size.
Lesson 5: Managing Printing
• Printing Components in Windows 7

• XPS and GDI-Based Printing

• Managing Client-Side Printing

• Configuring Location-Aware Printing

Printing Components in Windows 7
 XPS and GDI-Based Printing
XPS-based printing

•XPS is a new document description language

•Requires an XPS printer driver
•Is used only by WPF applications
•Generates a spool file in XPS format

GDI-based printing

•Is used by legacy applications in pre-Vista versions of Windows

•Uses enhanced metafile format (EMF) as the spool file format
•Requires a printer driver unique to each printer model

Interoperability of XPS and GDI-based printing

•XPS-based printing can print to an older GDI-based printer by converting

print jobs from XPS to EMF format

•GDI-based printing can print to a new XPS-based printer by converting

print jobs from EMF to XPS format
Managing Client-Side Printing

Print Management
Devices Tasks
and Printers
Configuring Location-Aware Printing
Questions?