Windows Security

Question 1

User & Groups

Answer 1

• User
  
  • Administrator (Windows Super-user)
  • Guest (Limited Access)
  • Standard users
• Groups
  
  • Power Users (not much more control than user)

Question 2

NTFS vs Share Permissions

Answer 2

• NTFS permissions apply from local & network connections
• Share permission only apply to connections over the network
• The most restrictive settings wins
• NTFS permissions are inherited from the parent object
  
  • Unless you move to a different folder on same volume

Question 3

Explicit & Inherited Permissions

Answer 3

• Explicit permissions
  
  • Set a default permissions for a share or object
• Inherited permission
  
  • Propagated from the parent to the child object
  • Set it once it applies to everything underneath

-Explicit permissions take precedence over inherited permissions

Question 4

Shared Files & Folders

Answer 4

• Administrative shares
  
  • Hidden shares (i.e ; C$) created during install
  • Local share are created by users
• System files & folders
  
  • c$ - \
  • Admin$ - \ windows
  • Print$ - Printer folder
• Computer Management / Shared Folders
  
  • Net share

Question 5

Run as Administrator

Answer 5

• Administrators have special rights & permissions
  
  • Editing files , installing services
• Use rights & permissions of the administrator
  
  • You don’t receive this by default
• Right-click the application
  
  • Run as Admin
  • Ctrl-Shift-Enter

Question 6

BitLocker

Answer 6

• Encrypt an entire volume
  
  • Not just single file
  • Protect all data including OS
• Data is always protected
  
  • Even when drive is removed
• Bitlocker to go
  
  • Encrypts removable USB flash drives

Question 7

EFS

Answer 7

• Encrypting File System
  
  • Encrypted at file system level
  • On NTFS

-Uses password & username to encrypt key

• OS support
  
  • Vista Business , Enterprise & Ultimate
  • 7 Professional , Enterprise & Ultimate
  • 8 / 8.1 Pro & Enterprise