(B13) Windows Server -NTFS Permission, Sharing and AD Groups
20220223 172308
NTFS (security) Permission:ACL
--Allow/Deny access
--Read and write
*Deny override any permission
Sharing a folder - 2 set of permission - Sharing, Security
Apply permission to user or group
AD Domain
Groups:
Types:
Security Group - can give permission to group, email, has SID
Destribution Group- not have SID, cant give permission to this group, email
SID - Security Identify
RID - Relative ID
Scope:
Domain Local Group -- member of this group can access domain local resources
Global Group -- can access other domain in same forest
Universal Group -- can access other domains in different forest
GG,UG -- can added to DLG
DLG -- can added to DLG but cant add to GG,UG
-----------------