Copyright: File Security Help copyright (c) Microsoft Corporation 1995-1996


What Is File Security?

Files and directories on a computer running Windows NT Workstation or Windows NT Server can be protected with special security attributes. When you install Windows NT Server Tools on your Windows 95 computer, you can view these security attributes over the network and change them.

Important

To use any of the Windows NT Server Tools, you must have administrative privileges at the computer you choose to administer.

Note

You can also use Server Manager to administer files and directories on a computer running Windows NT Workstation or Windows NT Server. Use Server Manager to share directories, set "share permissions" on shared directories (as opposed to permissions on files and directories themselves), see who is using shared resources, disconnect users from shared resources, and perform other tasks.

 Related Topics


Accessing File Security Properties

To edit security properties of a file or directory

1	Click Start, point to Programs, and then click Windows Explorer.

2	In the left pane, click Network Neighborhood.

3	In the right pane, double-click the name of the computer you want to administer, and then click the object you want to administer.

4	On the File menu, click Properties.

5	In the Properties dialog box, click the Security tab.

Important

The file or directory you want to administer must be on an NTFS-formatted drive of a computer running Windows NT Server or Windows NT Workstation.

Enter the settings you want for permissions, auditing, and ownership of the object or set of objects.

Notes

To change the properties of a shared file or directory, you must be logged on as a member of the Administrators, Server Operators, or Power Users group for the computer/domain you want to administer. Members of the Administrators group can change share properties on administrative shares, for example C$.

The following methods for selecting an object to administer do NOT work:

Administering print queues through the Printers list in My Computer. These print queue objects represent print queues local to your Windows 95 computer, even if the queue is redirected to a Windows NT Workstation or Windows NT Server print queue.

Using the Windows 3.x Print Manager. It no longer exists in Windows 95; the Printers icon in the Main group of Program Manager is just a shortcut to the Printers list in My Computer.

Using File Manager (WINFILE.EXE) in Program Manager. Installing Windows NT Server Tools does not add a Security menu to File Manager as it did for Windows 3.x.

 Related Topics


Setting Directory Permissions

To view or change directory permissions

1	In Windows Explorer, click the directory. You can select multiple directories.

2	On the File menu, click Properties.

3	In the Properties dialog box, click the Security tab, and then click Permissions.

Select the appropriate check boxes.

To apply changed permissions to the directory, its files, existing subdirectories, and their files, select both the Replace Permissions on Subdirectories and the Replace Permissions on Existing Files (the default setting) check boxes.

To apply changed permissions to the directory only (not to existing files in the directory or to subdirectories and their existing files), click to clear both the Replace Permissions on Subdirectories and Replace Permissions on Existing Files check boxes.

To apply changed permissions to the directory and subdirectories only (not to existing files in the directory or subdirectories), select the Replace Permissions on Subdirectories check box and click to clear the Replace Permissions on Existing Files check box.

4	Under Type of Access, click the name of a group or user, and then click a permission.

To remove directory permissions

To remove directory permissions, select the name of the group or user in the Directory Permissions dialog box, and click Remove.

Important

You can set directory permissions only on drives formatted to use the Windows NT file system (NTFS). To change permissions on the directory, you must be the owner of the directory, or have been granted permission to do so by the owner.

Notes and Tips

You can customize directory and file permissions by clicking Special Directory Access or Special File Access in the Permissions dialog box.

Permissions are cumulative except that the No Access permission overrides all other permissions. For example, if a user is a member of a group with Read permission and a member of a group with Change permission, the user will have Change permission. Groups or users granted Full Control permission on a directory can delete files in that directory no matter what permissions protect the files.

New files and subdirectories in a directory inherit the permissions for that directory

 Related Topics


Setting File Permissions

To change permissions on a file

1	Click the file in Windows Explorer. You can select multiple files.

2	On the File menu, click Properties.

3	In the Properties dialog box, click the Security tab, and then click Permissions.

4	In the File Permissions dialog box, select the name of the group or user whose permission you want to change.

5	Click a permission under Type of Access.

6	To customize the permissions set for the group or user, click Special Access under Type of Access.

To remove file permissions

To remove file permissions, select the name of the group or user in the File Permissions dialog box, and click Remove.

Important

To change permissions on the file, you must be the owner of the file, or have been granted permission to do so by the owner. You can set file permissions only on drives formatted to use the Windows NT file system (NTFS).

Notes and Tips

Permissions are cumulative except that the No Access permission overrides all other permissions. For example, if a user is a member of a group with Read permission and a member of a group with Change permission, the user will have Change permission. Groups or users granted Full Control permission on the directory containing a file can delete the file no matter what permissions protect it

When you set a standard permission, a set of individual permissions is displayed next to it. For example, when you set Read permission on a file, you see (RX), signifying Read and Execute permissions on the file.

 Related Topics


Setting Special Access Permissions

To set special access permissions

1	Click the file or directory in Windows Explorer. You can select multiple files or multiple directories.

2	On the File menu, click Properties.

3	In the Properties dialog box, click the Security tab, and then click Permissions.

4	In the Permissions dialog box, select the group or user you want to grant special access.

5	Under Type of Access, open the appropriate Special Access dialog box:

To set permissions on directories, click Special Directory Access.

To set permissions on all the files in the selected directories, click Special File Access.

To set permissions on selected files, click Special File Access.

6	To set special access permissions, select the check boxes for the access you want to grant:

To grant full control, click Full Control (All).

To remove permission from files in the selected directories and prevent files from inheriting permissions from the higher directories, click Access Not Specified.

Notes

When you set special access permissions on a directory, the permissions affect the directory only. Current permissions on files in the directory are not affected.

The Special Access dialog box shows which access permissions have been granted based on the current standard or special permissions setting.

 Related Topics


Auditing Files and Directories

To audit a file or directory

1	Click the file or directory in Windows Explorer. You can select multiple files or multiple directories.

2	On the File menu, click Properties, then.

3	In the Properties dialog box, click the Security tab, and then click Auditing.

4	Select check boxes to specify how auditing changes apply to existing files and subdirectories:

To apply changes only to the selected directory and its files, select the Replace Auditing on Existing Files check box (the default setting).

To apply changes to the directory and its files, and to existing subdirectories and their files Select both the Replace Auditing on Subdirectories and the Replace Auditing on Existing Files check boxes.

To apply changes only to the directory (but not to existing files in the directory or to subdirectories and their existing files), click to clear both the Replace Auditing on Subdirectories and Replace Auditing on Existing Files check boxes.

To apply changes only to the directory and subdirectories (but not to existing files in the directory or subdirectories), select the Replace Auditing on Subdirectories check box and then click to clear the Replace Auditing on Existing Files check box.

5	Set the name of a group or user, and then select the events to audit for that group or user, to set auditing for each group or user in the list:

To remove file or directory auditing for a group or user

In the Auditing dialog box, select the name of the group or user in the list, and click Remove.

Important

To audit files and directories, you must be logged on as a member of the Administrators group.

Notes

You can audit both successful and failed actions. To audit files and directories, you must set the audit policy to audit file and object access. Set the audit policy using User Manager.

 Related Topics


Adding Users and Groups to Permissions and Auditing Lists

To add a user or group to a permissions or auditing list

1	In either the Directory Permissions or the Directory Auditing dialog box, click Add.

2	You can use options in the Add Users and Groups dialog box to display users, find the users in a group, or find the domain to which a group or user belongs.

To display the names of users on the selected computer or domain, click Show Users.

To see a group's content, select the group and click Members.

Users are listed in a new dialog box.

To find the domain that contains the group's or user's, click Search, and use the dialog box that opens to look for the information you need.

3	In Names, select the groups or users you want to add, and then click Add.

4	If necessary, enter the location of the group’s or user’s account before clicking Add.

5	If you are adding users or groups to a permissions list, use Type of Access to select the permission for the groups or users shown in Add Names.

Notes and Tips

Domains appear only if your computer is a member of a domain on a Windows NT Server network. The domains shown have a trust relationship.

On a Windows NT Server network, global groups that are members of a local group appear in the list. To see a global group's users, select the group and click Members. To include the group in the Add Users and Groups dialog box, click Add. To include some of the group's users, select them and click Add.

The Add Users and Groups dialog box displays the groups on the computer or in the domain shown by the List Names From box. Local groups are shown for the computer or domain whose name is followed by an asterisk (*). You can select another domain by using List Names From.


Taking Ownership of Files or Directories

To take ownership of a file or directory

1	Click the file or directory in the Windows Explorer. You can select multiple files or multiple directories.

2	On the File menu, click Properties.

3	In the Properties dialog box, click the Security tab, and then click Ownership.

4	Click Take Ownership.

5	Click Yes if you have selected one or more directories and want to take ownership of all files and subdirectories in the trees of the selected directories

Notes

When you create a file or directory, you become the owner of it. By granting permissions, the owner controls how the file or directory is used. The owner can grant permission to another user to take ownership of a file or directory. Otherwise, you must be logged on as a member of the Administrators group to take ownership.

Although an administrator can take ownership, an administrator cannot transfer ownership to others. This preserves security. For example, only an administrator who takes ownership and changes permissions can gain access to a file on which you have set No Access permission. By checking the ownership of the file, you would see the ownership change and know who had violated the permission you set on the file. To make sure that your files are secure, you should check their ownership regularly.


Directory Access Permissions

When you set a directory permission, two sets of abbreviations for individual permissions are displayed next to it: the permissions set on the directory and the permissions set on files in the directory. For example, when you set the Add & Read permission on a directory, you see (RWX), signifying Read, Write, and Execute permissions on the directory, and (RX) signifying Read and Execute permission on files in the directory.

When access to files is shown as (Not Specified), that group or user cannot use files in the directory unless access is granted by another means; for example, by setting permissions that grant access on individual files.

An asterisk (*) following the set of directory permissions, for example (All)*, indicates that subdirectories do not inherit the permissions granted to that group or user.

Note

Groups or users granted Full Control permission on a directory can delete files in that directory no matter what permissions protect the files.

You can set the following standard permissions on directories:

 No Access (None)(None)

 List (RX)(Not Specified)

 Read (RX)(RX)

 Add (WX)(Not Specified)

 Add & Read (RWX)(RX)

 Change (RWXD)(RWXD)

 Full Control (All)(All)


File Access Permissions

When you set a file permission, a set of abbreviations for individual permissions is displayed next to it. For example, when you set Read permission on a file, you see (RX) signifying Read and Execute permission.

You can set the following standard permissions on files:

 No Access (None)

 Read (RX)

 Change (RWXD)

 Full Control (All)

Note

Groups or users granted Full Control permission on the directory containing a file can delete the file no matter what permissions protect it.


Special Access Directory Permissions

You can set the following individual directory permissions when creating special access permission for directories:

Read (R)

Allows viewing the names of files and subdirectories.

Write (W)

Allows adding files and subdirectories.

Execute (X)

Allows changing to subdirectories in the directory.

Delete (D)

Allows deleting the directory.

Change Permissions (P)

Allows changing the directory's permissions.

Take Ownership (O)

Allows taking ownership of the directory.


Special Access File Permissions

You can set the following individual file permissions when creating special access permission for files:

Read (R)

Allows viewing the file's data.

Write (W)

Allows changing the file's data.

Execute (X)

Allows running the file if it is a program file.

Delete (D)

Allows deleting the file.

Change Permissions (P)

Allows changing the file's permissions.

Take Ownership (O)

Allows taking ownership of the file.


Shared Directory Permissions

You can set the following permissions for files and directories through a shared directory:

 No Access (None)

 Read

 Change

 Full Control (All)


Audited Directory Events

You can select the following events to audit directory actions:

Read

Audits display of filenames, attributes, permissions, and owner.

Write

Audits creation of subdirectories and files, changes to attributes, and display of permissions and owner.

Execute

Audits display of attributes, permissions, and owner; and changing to subdirectories.

Delete

Audits deletion of the directory.

Change Permissions

Audits changes to directory permissions.

Take Ownership

Audits changes to directory ownership.


Audited File Events

You can select the following events to audit file actions:

Read

Audits display of the file's data, attributes, permissions, and owner.

Write

Audits changes to the file's data or attributes, and display of permissions and owner.

Execute

Audits running of program files and display of attributes, permissions, and owner.

Delete

Audits deletion of the file.

Change Permissions

Audits changes to the file's permissions.

Take Ownership

Audits changes to the file's ownership.


Setting File Attributes

To change file attributes for one or more files

1	Click the files whose attributes you want to set.

2	From the File menu, click Properties.

If you are using a network, more options may be available in the Properties dialog box.

3	In the Properties dialog box, select or clear the check boxes for the attribute settings.

When you select more than one file, check boxes appear gray if the attribute for the files is not set alike.

4	Click OK.

Important

On drives formatted to use the Windows NT file system (NTFS), you must have permission to change file attributes.

Notes

You can change the properties of a file. These properties include file attributes such as read only, archive, hidden, and system. File attributes are part of the directory information the operation system maintains for each file. This information helps the operating system identify a file and controls the kinds of tasks you can perform with the file. You can see file attributes in a directory window by clicking All File Details on the View menu.

 Related Topics


Properties

Sets file attributes and displays other file information.

Click the following buttons for information about the dialog box:

 Read Only

 Archive

 Hidden

 System

 Version Information

 Open By Button

 Related Topics


Properties

Sets file attributes and displays information about the number and size of files selected.

Each option has one of three settings:

Attribute is set for all selected files.

Attribute is not set for any of the selected files.

Attribute is set for some, but not all, of the selected files.

Click one of the following buttons for information about a particular file attribute:

 Read Only

 Archive

 Hidden

 System

 Related Topics


Network Properties

Allows you to stop the use of a file and displays the status of a shared file, including the following information:

Total Opens shows the total number of open files (including files open more than once) on the computer that the file is on.

Total Locks shows the total number of locks on the computer that the file is on.

Open By shows the names of the users who have the file open.

For shows the type of access the user has to the file.

Locks shows the number of locks the user has on the file.

File ID shows the identification number of the file.

Caution

When you close a file that is in use, changes made to that file will not be saved.

Important

To stop the use of shared files, you must be logged on as a member of the Administrators, Server Operators, or Power Users group.

Close Selected

To stop the use of a file by one or more users, select the users and click Close Selected.

Close All

To stop the use of a file by all users, click Close All.


Owner

Displays the owner of the selected file or directory.

To take ownership of the file or directory, click Take Ownership.

 Related Topics


Add Users and Groups

Used to add a group or user to the permission list for a file or directory.

Click the following buttons for information about the dialog box:

 List Names From

 Names

 Add Button

 Show Users Button

 Members Button

 Search Button

 Add Names

 Type of Access

 Related Topics


Local Group Membership

Displays the members of the local group selected in the Add Users and Groups dialog box. To work with the list, you can do the following:

To include the group in Add Names in the Add Users and Groups dialog box, click Add.

To include some of the listed members in Add Names in the Add Users and Groups dialog box, select them and click Add.

To see a global group's members on a Windows NT Server network, select the group, and then click Members.

Global groups that are members of a local group appear in the list in Windows NT Server networks.

 Related Topics


Global Group Membership

Displays the members of the global group selected in the Add Users and Groups dialog box or in the Local Group Membership dialog box. To work with the list, you can do the following:

To include the group in Add Names in the Add Users and Groups dialog box, click Add.

To include some of the listed members in Add Names in the Add Users and Groups dialog box, select them and click Add.

 Related Topics


Find Account

When you add a user or group to the permissions or audit list, you must know the name of the domain that contains the user or group's account. Use the Find Account dialog box to locate the domain of an account on a Windows NT Server network.

Click the following buttons for information about the dialog box:

 Find User or Group

 Search All

 Search Only In

 Search Button

 Add Button

 Related Topics


File Permissions

Used to set or change permission for groups and users.

Click the following buttons for information about the dialog box:

 File

 Owner

 Name

 Type of Access

 Add Button

 Remove Button

 Related Topics


Directory Permissions

Used to set or change permission for groups and users.

Click the following buttons for information about the dialog box:

 Directory

 Owner

 Replace Permissions on Subdirectories

 Replace Permissions on Existing Files

 Name

 Type of Access

 Add Button

 Remove Button

 Related Topics


File or Directory Permissions

Sets file or directory permissions. When a file is selected, displays the File Permissions dialog box. When a directory is selected, displays the Directory Permissions dialog box.

 Related Topics


Special Access File Permissions

Used to set special access permission for a group or user.

Click the following buttons for information about the dialog box:

 File

 Name

 Full Control (All)

 Other

 Related Topics


Special Directory Access

Used to set special access permission for a group or user.

Click the following buttons for information about the dialog box:

 Directory

 Name

 Full Control (All)

 Other

 Related Topics


Special File Access

Used to set special access permissions for a group or user.

Click the following buttons for information about the dialog box:

 Directory

 Name

 Access Not Specified

 Full Control (All)

 Other

 Related Topics


File Auditing

Used to audit the use of a file by groups and users.

Click the following buttons for information about the dialog box:

 File

 Name

 Events to Audit

 Add Button

 Remove Button

 Related Topics


Directory Auditing

Used to audit the use of a directory by groups and users.

Click the following buttons for information about the dialog box:

 Directory

 Replace Auditing on Subdirectories

 Replace Auditing on Existing Files

 Name

 Events to Audit

 Add Button

 Remove Button

 Related Topics


Add Users and Groups

Used to add a group or user to the auditing list for a file or directory.

Click the following buttons for information about the dialog box:

 List Names From

 Names

 Add Button

 Show Users Button

 Members Button

 Search Button

 Names

 Related Topics


Add

Used to add a group or user to the permission list for a file or directory.

Click the following buttons for information about the dialog box:

 File or Directory

 Name

 Type of Access


File Permissions [LAN Manager 2.x]

Used to set or change permission for groups and users.

Click the following buttons for information about the dialog box:

 File

 Name

 Type of Access

 Add Button

 Remove Button


Directory Permissions [LAN Manager 2.x]

Used to set or change permission for groups and users.

Click the following buttons for information about the dialog box:

 Directory

 Replace Permissions on Files/Subdirectories

 Name

 Type of Access

 Add Button

 Remove Button


Special Access

Used to set special access permission for a group or user.

Click the following buttons for information about the dialog box:

 File

 Name

 Permissions


Special Directory Access

Used to set special access permission for a group or user.

Click the following buttons for information about the dialog box:

 Directory

 Name

 Permissions


File Auditing [LAN Manager 2.x]

Used to audit the use of a file.

Click the following buttons for information about the dialog box:

 File

 Events to Audit


Directory Auditing [LAN Manager 2.x]

Used to audit the use of a file.

Click the following buttons for information about the dialog box:

 Directory

 Replace Auditing on Files/Subdirectories

 Events to Audit


Contents

Starts Help and displays the topics in File Security Help.


Search for Help on

Opens the Index tab for File Security Help. Using the Index tab, you can look up Help information by using keywords.


How to Use Help

Describes how to use Help.


About File Security

Displays version, mode, and copyright information about Windows.


Control Menu

Contains the following commands:

Restore

Restores the window to its former size after it has been maximized or minimized.

Move

Enables you to use the keyboard to move the window to another position.

Size

Enables you to use the keyboard to change the size of the window.

Minimize

Reduces the window to an icon.

Maximize

Enlarges the window to its maximum size.

Close

Quits an application, or closes a window or dialog box.

Next

Switches to the next window or icon.


Control Menu

Contains the following commands:

Restore

Restores the window to its former size after it has been maximized or minimized.

Move

Enables you to use the keyboard to move the window to another position.

Size

Enables you to use the keyboard to change the size of the window.

Minimize

Reduces the window to an icon.

Maximize

Enlarges the window to its maximum size.

Close

Quits an application, or closes a window or dialog box.

Switch To

Starts Task List, which you can use to switch between running applications and to rearrange their windows and icons.


Read Only

Select this check box if you want to prevent a file from being changed.


Archive

Select this check box if you want to mark a file that has changed since it was last backed up.

You may want to set the archive attribute if you use the Windows NT backup or restore command.


Hidden

Select this check box if you don't want a particular file to appear in a directory window.

Note

If you want to display a file that has the hidden attribute set, you can click By File Type on the View menu and then select the Show Hidden/System Files check box.


System

Select this check box if you want to identify a file as a system file.

Note

When you select this check box, the file does not appear in directory listings. If you want the file to appear in a directory window in File Manager, you can click By File Type on the View menu and then select the Show Hidden/System Files check box.


Version Information

Shows version information for files.

Select the subject in the left box to display the information on the subject in the right box.


Open By

Shows who is using shared files and allows you to stop the use of a file.


Files with Extension

Displays the filename extension of the selected file.

To associate a file that has a different extension, type the extension in this box.


Associate With

Under Associate With, select the file type and program that you want to associate with the extension shown in Files With Extension.

If the application you want to associate is not shown in Associate With, type the program filename including its extension in Associate With. You can click Browse to search for a program file.

To cancel an association, click (None) in Associate With.


Browse Button

Click Browse to search for a program file.


New Type Button

Click this button to create a new file type that you can associate with a file extension.


Change Type Button

Click this button to edit the file type selected in Associate With.

You can also add and delete associations when you edit a file type.


Delete Type Button

Click this button to delete the file type selected in Associate With.


File Type

Type a name for the file type.


File Type

To change the name of the file type, type another name in File Type.


Action

Click the action, Open or Print, which executes the command in Command and the DDE options you specify.


Action

Click the action, Open or Print, for which you want to change the command.


Command

Specifies the command for the action selected in Action.

Type the name of the program file, including its extension, and any parameters.

In commands, %1 represents the filename of the file currently selected in File Manager. If the application supports DDE, specify the name of the program file under Command and use the options under DDE to specify the DDE commands.

Note

If the program is a Windows 3.1 application and you want it to run in a separate memory space from other Windows 3.1 applications, use the cmd /c start /separate c:\apppath\appname.exe syntax in Command (instead of just typing c:\apppath\appname.exe).


Command

You can change the commands for the file type. In commands, %1 represents the filename of the file currently selected in File Manager. If the application supports dynamic data exchange (DDE), specify the name of the program file in Command and use the options in the DDE area to specify the DDE commands.

To change the command for an action, click the action in Action, and then edit the command in Command.

Note

If the application is a Windows 3.1 application and you want it to run in a separate memory space from other Windows 3.1 applications, use the cmd /c start /separate c:\apppath\appname.exe syntax in Command (instead of just typing c:\apppath\appname.exe).


Browse Button

Click Browse to open a dialog box you can use to select a program file to use as a command.


Uses DDE

Specifies that the application uses DDE commands to perform the action.


DDE Message

Specifies which DDE command to use if the application is already running.


DDE Message Application Not Running

Specifies which DDE command to use if the application is not running.


Application

Specifies the DDE application string used to initiate a DDE conversation with the application specified in the Command box.


Topic

Specifies the DDE topic string used to initiate a DDE conversation with the application specified in Command.


Extensions Associated with this File Type

Used to add extensions to or remove extensions from the list of extensions associated with the file type shown in File Type.

To add an extension, type the extension in New Extension, and click Add.

To remove an extension, select it in Extensions, and click Remove.


File Name

Select a filename, and then click OK.

If the program file you want is not listed in File Name, you may have to change directories by entering a directory in Directories.


List Files of Type

Open the list, and then select the type of file you want to appear in File Name.


Directories

Click the directory that contains the program file you want to use. The names of the files in that directory will appear in File Name.

If the directory you want is not in the list, you may have to change drives by opening Drives and selecting a drive.


Drives

Open the list, and then click the drive that contains the program file you want.

The directories on that drive will appear in Directories.


Share Name

Shows the name users specify to connect to the shared directory. For a computer running MS-DOS to connect, the name must conform to MS-DOS 8.3 naming conventions. On networks running Windows NT, the name can be up to 12 characters long.

Type a different name in Share Name.

By default, the name is that of the selected directory.


Share Name

Shows the name users specify to connect to the shared directory. You cannot change the share name of a shared directory; however, you can share the directory again under a different name.

If the directory has been shared more than once, you can select the share name of the share having the properties you want to change.


Path

Shows the path and name of the selected directory.

To share a different directory, type the path and name for that directory.

By default, the path is that of the selected directory.


Path

Shows the path and name of the selected shared directory.


Comment

The optional comment is displayed with the share name in the Connect Network Drive dialog box.

Type a comment describing the shared directory.


Comment

Shows the comment for the currently selected share.

To change the comment, type the changes in Comment.


User Limit

Sets the maximum number of users who can connect to the shared directory at one time. By default, no limit is set.

To set a limit, click Allow and enter a limit in Users.


User Limit

Shows the user limit for the currently selected share.

To set a limit, click Allow and enter a limit in Users.

To remove the limit, click Unlimited.


Permissions Button

Used to control access to a shared directory by setting permissions on it.

To secure the directory, click Permissions.


Permissions Button

Shows the permissions set on the currently selected share.

To change the permissions set on the share, click Permissions.


List Names From

Displays the name of the domain or computer whose groups are shown in Names. An asterisk (*) following the name indicates that local groups for that domain or computer are shown.

To display groups and users in another domain or on the computer, click the domain or the computer.


Names

Displays the groups or users belonging to the current domain or computer.

To add groups or users to the permissions list, select them in Names, and click Add.


Names

Displays the groups or users belonging to the current domain or computer.

To add groups and users to the auditing list, select them in Names, and click Add.


Add Button

To add groups or users to the audit list, select them in Names, and click Add.


Members Button

To see the contents of a group, select the group in Names, and click Members.


Search Button

To find the domain to which a group or user belongs, click Search.

Note

To add a group or user, you must know the domain that contains the account for the group or user.


Add Names

Displays the names of the groups and users you are adding to the audit list.

To add groups or users to Add Names, select them in Names, and click Add.


Name

Displays the groups and users on the current server.

To set a permission, select the group or user, and select a permission under Type of Access, and then click OK.


Add Button

To add groups or users to the permissions list, select them in Names, and click Add.


Show Users Button

To display the names of users belonging to the current domain or computer in Names, click Show Users.


Members Button

To see the contents of a group, select the group in Names, and click Members.


Search Button

To find the domain to which a group or user belongs, click Search.

Note

To add a group or user, you must know the domain that contains the account for the group or user.


Add Names

Displays the names of groups and users who you are adding to the permissions list.

To add groups or users to Add Names, select them in Names, and click Add.


Type of Access

Displays a list of available permissions.

To set a permission for the groups and users listed in Add Names, select a permission, and then click OK.


Type of Access

Displays a list of available permissions.

To set a permission, select the group or user in Name, select a permission, and then click OK.


File

Displays the path and name of the selected file.


Directory

Displays the name of the selected directory.


Access Through Share

Displays the name of the shared directory through which access to files and directories is controlled.


File or Directory

Displays the name of the selected file or directory.


Owner

Displays the name of the owner of the file.


Owner

Displays the name of the owner of the directory.


Owner

The name of the owner of a shared directory is not displayed. Ownership of a shared directory does not affect who can set permissions.


Replace Permissions on Subdirectories

By default, permissions you set apply only to the directory and its files.

Select the check box to apply permissions to all subdirectories.

If the Replace Permissions on Existing Files check box is selected, permissions are also changed on the files in subdirectories.


Replace Permissions on Existing Files

Clear this check box to apply permissions to the directory only.

If the Replace Permissions on Subdirectories check box is selected, permissions are also changed on subdirectories.

Note

By default, permissions you set apply to files in the directory as well as to the directory itself.


Replace Permissions on Files/Subdirectories

Select this check box to apply permissions to all existing files and subdirectories.

Note

Normally, permissions you set apply to the directory itself and to files that currently have no permissions set on them.


Name

Displays the names of groups and users and their current permissions.

To change a permission, select the group or user and select a permission under Type of Access.


Type of Access

Displays a list of available permissions.

To change a permission, select the group or user in Name, and select a permission.


Type of Access

Displays a list of available permissions.

To change a permission, select the group or user in Name, and select a permission.


Type of Access

Displays a list of available permissions.

To change a permission, select the group or user in Name, and select a permission.


Type of Access

Displays a list of available permissions.

To change a permission, select the group or user in Name, and select a permission.


Type of Access

Displays a list of available permissions.

To change a permission, select the group or user in Name, and select a permission.


Type of Access

Displays a list of available permissions.

To set a permission, select the group or user in Name, select a permission, and then click OK.


Add Button

To add groups or users to the permission list, click Add.


Remove Button

To remove a group or user from the permission list, select the group or user, and then click Remove.


Find User or Group

In Find User Or Group, enter the name of the group or user whose account you want to find.


Search All

To search for the account in all the listed domains, click Search All.


Search Only In

To search for the account in one or more domains, select them in Search Only In.


Search Button

After specifying a group or user and the domains to search, click Search to start the search.


Add Button

To add the user or group to Add Names in the Add Users and Groups dialog box, select the user or group in Search Results, and then click Add.


File

Displays the path and name of the selected file.


Directory

Displays the name of the selected directory.


Share

Displays the share name of the selected share.


Name

Displays the name of the selected group or user.


Access Not Specified

Click Access Not Specified to prevent files from inheriting permissions from the directory.


Full Control (All)

Click Full Control (All) to grant the selected group or user Full Control of the file.


Full Control (All)

Click Full Control (All) to grant the selected group or user Full Control of the directory.


Other

Select check boxes for the access you want to grant.


Other

Select check boxes for the access you want to grant.


Permissions

Select check boxes for the access you want to grant.


Permissions

Select check boxes for the access you want to grant.


Name

Displays the names of currently audited groups and users.


Replace Auditing on Subdirectories

Select the check box to apply auditing to all subdirectories.

If the Replace Auditing on Existing Files check box is selected, auditing changes also apply to the files in subdirectories.

Note

By default, auditing changes apply only to the directory and its files.


Replace Auditing on Existing Files

Clear the check box to apply auditing changes only to the directory. If the Replace Auditing on Subdirectories check box is selected, auditing changes also apply to subdirectories.

Note

By default, auditing changes apply to both the directory and the files in the directory.


Replace Auditing on Files/Subdirectories

Select this check box to apply auditing to all existing files and subdirectories, whether or not they are currently audited.

Events you specify for auditing are audited for the directory itself and for files that are currently not audited.


Events to Audit

Select a group or user, and then select the events you want to audit for the file by selecting the appropriate check boxes.

For a particular file, you can audit events that succeed and those that fail.


Events to Audit

Select a group or user, and then select the events you want to audit for the directory by selecting the appropriate check boxes.

For a particular directory, you can audit events that succeed and those that fail.


Events to Audit

Select the events you want to audit by selecting the appropriate check boxes.

You can audit events that succeed and those that fail.


Add Button

To add groups or users to the auditing list, click Add.


Remove Button

To remove a group or user from the auditing list, select the group or user, and then click Remove.


Enter Network Password

Type your password in Password, and click OK.

You must supply a password to connect to the shared directory.


Restoring Network Connections

Displays the reason that a network connection has not been restored.

If you no longer want to restore this connection automatically, select the Do Not Try To Restore The Connection In The Future check box.


Add Users and Groups

Used to add a group or user to the permission list for the share.

Click the following buttons for information about the dialog box:

 List Names From

 Names

 Add Button

 Show Users Button

 Members Button

 Search Button

 Add Names

 Type of Access

 Related Topics


Share Properties

Used to change properties for a shared directory.

Click the following buttons for information about the dialog box:

 Share Name

 Path

 Comment

 User Limit

 Permissions Button


New Share

Shares the selected directory.

Click the following buttons for more information about the dialog box:

 Share Name

 Path

 Comment

 User Limit

 Permissions Button


Shared Directories

Allows you to create a new share, change share properties for a shared directory, or stop sharing a directory.

Click the following buttons for more information about the dialog box:

 Shared Directories on

 New Share Button

 Properties Button

 Stop Sharing Button


Enter Password (LAN Manager 2.x)

To connect to the server, type the password in Password and click OK.

To perform administrative tasks on the server, you must supply a password.


Access Type -- Read Only

To allow users to only read files and execute programs, click Read Only.


Access Type -- Change

To allow users to read files; execute programs; change files; create and delete files and subdirectories; and set attributes; click Change.


Access Type -- Other

To specify access using individual permissions, enter the abbreviation for each permission in Other: R (read), W (write), X (execute), D (delete), C (create), A (set attributes), and P (set permissions).


Password

To set a password that protects the directory, type the password in Password.


Share Name

Shows the share name of the selected shared directory.


Path

Shows the directory path for the currently selected share. By changing the path, you can change the directory you are sharing under the current share name.

To change the path, type the new path in Path.


Comment

Shows the comment for the currently selected share.

To change the comment, type the changes in Comment.


User Limit

Shows the user limit for the currently selected share. To change the limits, you can do the following:

To set a limit, click Allow, and then enter a limit in Users.

To remove the limit, click Unlimited.


Permissions Button

Shows the permissions set on the currently selected share.

To change the permissions set on the share, click Permissions.


Share Name

The share name is the name users specify to connect to the shared directory. In order for computers running MS-DOS to connect, the name must conform to the MS-DOS 8.3 naming convention. On networks running Windows NT, the name can be 12 characters long.

Type a share name for the shared directory in Share Name.


Path

Type the path and name of the directory you want to share in Path.


Comment

The optional comment is displayed with the share name in the Connect Network Drive dialog box.

Type a comment describing the shared directory in Comment.


User Limit

Sets the maximum number of users who can connect to the shared directory at one time. By default, no limit is set.

To set a limit, click Allow and set a limit in Users.


Permissions Button

You can control access to a shared directory by setting permissions for groups and users on it.

To secure the directory, click Permissions.


Shared Directories on

Displays the shared directories on the selected computer.


New Share Button

Allows you to share a directory. Selecting an administrative share on the computer before clicking New Share allows you to share any directory on that drive.

For example, selecting C$ allows you to share directories on the C: drive.


Properties Button

Select the shared directory whose properties you want to change, and click Properties.

You can change the following properties for the selected share:

The directory that is shared under that share name.

The comment displayed with the share name.

The number of users allowed to connect to the share at one time.

Permissions controlling access to the share.


Stop Sharing Button

Select the shared directory that you want to stop sharing and click Stop Sharing.


No Access (None)(None)

Prevents any access to the directory and its files. Specifying No Access for a user prevents access even if that user belongs to a group that has access to the directory.


List (RX)(Not Specified)

Allows:

Viewing filenames and subdirectory names.

Changing to the directory's subdirectories.

Does not allow:

Access to files, unless granted by other directory or file permissions.


Read (RX)(RX)

Allows:

Viewing filenames and subdirectory names.

Changing to the directory's subdirectories.

Viewing data in files and running applications.


Add (WX)(Not Specified)

Allows:

Adding files and subdirectories to the directory.

Does not allow:

Access to files, unless granted by other directory or file permissions.


Add & Read (RWX)(RX)

Allows:

Viewing filenames and subdirectory names.

Changing to the directory's subdirectories.

Viewing data in files and running application files.

Adding files and subdirectories to the directory.


Change (RWXD)(RWXD)

Allows:

Viewing filenames and subdirectory names.

Changing to the directory's subdirectories.

Viewing data in files and running application files.

Adding files and subdirectories to the directory.

Changing data in files.

Deleting the directory and its files.


Full Control (All)(All)

Allows:

Viewing filenames and subdirectory names.

Changing to the directory's subdirectories.

Viewing data in files and running application files.

Adding files and subdirectories to the directory.

Changing data in files.

Deleting the directory and its files.

Changing permissions on the directory and its files.

Taking ownership of the directory and its files.


No Access (None)

Prevents any access to the file. Specifying No Access for a user prevents access even if that user belongs to a group that has access to the file.


Read (RX)

Allows:

Viewing the file data.

Running the file if it is a program file.


Change (RWXD)

Allows:

Viewing the file data.

Running the file if it is a program file.

Changing data in the file.

Deleting the file.


Full Control (All)

Allows:

Viewing the file data.

Running the file if it is a program file.

Changing data in the file.

Deleting the file.

Changing permissions on the file.

Taking ownership of the file.


No Access (None)

Prevents any access to the shared directory, its subdirectories, and its files.


Read

Allows:

Viewing filenames and subdirectory names.

Changing to the shared directory's subdirectories.

Viewing data in files and running application files.


Change

Allows:

Viewing filenames and subdirectory names.

Changing to the shared directory's subdirectories.

Viewing data in files and running application files.

Adding files and subdirectories to the shared directory.

Changing data in files.

Deleting subdirectories and files.


Full Control (All)

Allows:

Viewing filenames and subdirectory names.

Changing to the shared directory's subdirectories.

Viewing data in files and running application files.

Adding files and subdirectories to the shared directory.

Changing data in files.

Deleting subdirectories and files.

Changing permissions (NTFS files and directories only).

Taking ownership (NTFS files and directories only).


associate

To identify a filename extension as "belonging" to a certain application, so that when you open any file with that extension, the application starts automatically.


attributes

Information that indicates whether a file is a read-only, hidden, or system file, and whether the file has been changed since a backup copy of it was made.


active

The window or icon that you are currently using or that is currently selected. Windows NT always applies the next keystroke or command you choose to the active window. If a window is active, its title bar changes color to differentiate it from other windows. If an icon is active, its label changes color.

Windows or icons on the desktop that are not selected are inactive.


branch

A segment of the directory tree, representing a directory and any subdirectories it contains.


collapse

To hide additional directory levels below a selected directory in the directory tree.


default printer

The printer that is used if you click the Print command without first specifying which printer you want to use with an application. You can have only one default printer; it should be the printer you use most often.


directory tree

A graphical display of a disk's directory structure. The directories on the disk are shown as a branching structure. The top-level directory is the root directory.


directory window

A File Manager window that displays the contents of a disk. The window shows both the directory tree and the contents of the current directory.


document file

A file that is associated with an application. When you open a document file, the application starts and loads the file.


document-file icon

Represents a file that is associated with an application. When you choose a document-file icon, the application starts and loads the file.


drive icon

An icon that represents a disk drive on your system. Different icons depict floppy disk drives, hard disk drives, network drives, RAM drives, and CD-ROM drives.


expand

To show hidden directory levels in the directory tree. You can expand a single directory level, one branch of the directory tree, or all branches at once.


file allocation table (FAT)

A table or list maintained by some operating systems to keep track of the status of various segments of disk space used for file storage.


font

A graphic design applied to a collection of numbers, symbols, and characters. A font usually comes in different sizes and styles.


icon

A graphical representation of an element in Windows NT, such as a disk drive, directory, group, application, or document. You can enlarge an application icon to a window when you want to use the application.


path

Specifies the location of a file within the directory tree. For example, to specify the path of a file named README.WRI located in the WINDOWS directory on drive C, you would type c:\windows\readme.wri.


program file

A file that starts an application or program. A program file has an .EXE, .PIF, .COM, or .BAT filename extension.


reduce

To minimize a window to an icon by clicking the Minimize button or the Minimize command. A minimized application continues running, and you can click the icon to make it the active application.


status bar

A line of information related to the application in the window. Usually located at the bottom of a window. Not all windows have a status bar.


title bar

The horizontal bar (at the top of a window) that contains the title of the window or dialog box. On many windows, the title bar also contains the Control menu box and Maximize and Minimize buttons.


wildcard

A character that represents one or more characters. The question mark (?) wildcard can be used to represent any single character, and the asterisk (*) wildcard can be used to represent any character or group of characters that might match that position in other filenames.


Click Help Topics for a list of Help topics.