Windows Security Settings Flashcards
Users and groups
Users and groups
• Users
- Administrator
- The Windows super-user
- Guest
- Limited access
- Standard Users
• Groups
• Power Users
• Not much more control
than a regular user
NTFS vs. Share permissions
• NTFS permissions apply from local and network connections
• Share permissions only apply to connections
over the network
• A “network share”
- The most restrictive setting wins
- Deny beats allow
• NTFS permissions are inherited from the parent
object
• Unless you move to a different folder on the same
volume
Shared files and folders
- Administrative shares
- Hidden shares (i.e., C$) created during installation
- Local shares are created by users
- System files and folders
- C$ - \
- ADMIN$ - \Windows
- PRINT$ - Printers folder
- Computer Management / Shared Folders
- net share
Explicit and inherited permissions
- Explicit permissions
- Set default permissions for a share
• Inherited permissions
• Propagated from the parent object to the child
object
• Set a permission once, it applies
to everything underneath
• Explicit permissions take precedence
over inherited permissions
• Even inherited deny permissions
User authentication
- Authentication
- Prove you are the valid account holder
- Username / Password
- Perhaps additional credentials
- Single sign-on (SSO)
- Windows Domain
- Provide credentials one time
- No additional pop-ups or interruptions
- Managed through Kerberos
Run as administrator
- Administrators have special rights and permissions
- Editing system files, installing services
• Use rights and permissions of the administrator
• You don’t get these by default, even if you’re in the
Administrators group
- Right-click the application
- Run as administrator (Or Ctrl-Shift-Enter)
BitLocker
- Encrypt an entire volume
- Not just a single file
- Protects all of your data, including the OS
- Lose your laptop?
- Doesn’t matter without the password
• Data is always protected
• Even if the physical drive is moved
to another computer
BitLocker To Go
Encrypt removable USB flash drives
EFS
- Encrypting File System
- Encrypt at the filesystem level
- On NTFS
- OS support
- 7 Professional, Enterprise and Ultimate
- 8 and 8.1 Pro and Enterprise
- 10 Pro, Enterprise, and Education
• Uses password and username to encrypt the key
• Administrative resets will cause EFS files to be
inaccessible
In NTFS, a folder or file copied from one location to another on the same volume retains its original permissions.
False
In NTFS, a folder or file moved from one location to another on the same volume inherits the permissions of its new parent folder.
False
In NTFS, a folder or file copied or moved from one location to another on a different volume inherits permissions of its new parent folder.
True
Which of the following answers lists the correct syntax for applying the read-only attribute to a file?
attrib +R [drive:] [path] [filename]
What is the correct hierarchy of precedence for permissions settings in NTFS?
Explicit Deny -> Explicit Allow -> Inherited Deny -> Inherited Allow
Which user group in Windows (applies to Windows 7 and earlier versions) had rights and permissions that allowed its members to perform specific administrator-level tasks?
Power Users
