Setup Share Folders with NTFS Permission in Windows Server 2019
Summary
TLDRThis tutorial video demonstrates various methods to create a shared folder in Windows Server 2019, enhancing accessibility for network users. It covers using Server Manager Console, File Explorer, and Computer Management Console, detailing each step from selecting the server and folder path to setting permissions for different user groups. The video also highlights the importance of configuring NTFS permissions and access-based enumeration for secure and controlled data sharing. By the end, viewers will understand how to effectively manage shared folders to improve collaboration within a network environment.
Takeaways
- 😀 The video demonstrates various methods to create a shared folder in Windows Server 2019.
- 🔧 Using Server Manager Console, you can create a new share folder by navigating through File and Storage Services, then Shares.
- 📁 Two default shared folders, 'Matlock' and 'SYSVOL', are automatically created when a server is promoted as a domain controller.
- 🖥️ The video shows selecting 'SMB Share - Quick' for general file sharing, which is one of the five available share profiles.
- 📂 Custom paths can be used to create a shared folder on a specific server, like the domain controller WS2019-01.
- 📝 When creating a share, it's important to name the share folder without spaces and provide a description if necessary.
- 👀 Enabling 'Access-based enumeration' prevents users from seeing files and folders they don't have permission to access.
- 🔄 'Allow caching of shares' is an option that allows offline users to access the content of the share folder.
- 🛠️ Customizing permissions involves disabling inheritance and setting explicit permissions for different users or groups.
- 👥 The video uses Active Directory Users and Computers to assign permissions to a security group for the shared folder.
- 🔄 The 'Creator-Owner' concept is explained, where users who create files or folders within the shared folder gain full control over them.
- 🔄 The video also covers using File Explorer and Computer Management Console as alternative methods to create shared folders.
- 🚫 It's noted that sharing permissions set in File Explorer can override NTFS permissions, emphasizing the importance of proper configuration.
- 💻 The final method mentioned is using the command line to create shared folders, though it's not demonstrated due to its complexity.
Q & A
What is the purpose of creating a shared folder in Windows Server 2019?
-Creating a shared folder in Windows Server 2019 allows network users to access data stored on the server from their client computers, based on the permissions assigned to the shared folders.
How can you access the Server Manager console to create a new share folder?
-To access the Server Manager console, you need to open it and navigate to the left-hand side where you will find 'File and Storage Services'. Click on that and then click on 'Shares' to see the list of current share folders.
What are share profiles and why are they used when creating a new share folder?
-Share profiles are pre-configured settings that determine the type of sharing that is suitable for different needs. They are used to streamline the process of creating a new share folder and to ensure that the share is optimized for its intended use, such as general file sharing, advanced SMB share applications, or NFS sharing.
What is the 'SMB Share - Quick' profile used for?
-The 'SMB Share - Quick' profile is used for general file sharing. It is suitable when you have a standard file server role installed on your server and you need to share files in a basic manner.
How do you specify the local path for a new shared folder?
-To specify the local path for a new shared folder, you need to select 'Type a custom path', then click on 'Browse'. You will then be able to navigate to the desired location on the server's drives and select the folder you wish to share.
What is 'Access-based enumeration' and why is it enabled?
-Access-based enumeration is a feature that prevents users from seeing files and folders they do not have permission to access. It is enabled to enhance security by ensuring that users only see and can access content they are permitted to view or use.
How can you customize permissions for a shared folder?
-To customize permissions for a shared folder, you can click on 'Customize Permissions' during the share folder creation process. Here, you can disable inheritance and set explicit permissions for different users or groups.
What is the significance of disabling inheritance when setting permissions on a shared folder?
-Disabling inheritance allows you to set unique permissions for the shared folder that are not inherited from parent folders. This ensures that the security settings for the shared folder are tailored to its specific needs and are not automatically applied from higher-level folder permissions.
How can you assign permissions to a specific department, such as HR, for a shared folder?
-You can assign permissions to a specific department by using Active Directory Users and Computers to select the appropriate security group, such as 'Azure Users' for the HR department, and then granting them the desired permissions on the shared folder.
What happens when a user creates a file or folder under a shared folder with customized permissions?
-When a user creates a file or folder under a shared folder with customized permissions, they become the 'creator-owner' of that file or folder. As the creator-owner, they have full control over the subfolders and files they create.
How can you confirm that a user can access and use the shared folder with appropriate permissions?
-To confirm that a user can access and use the shared folder with appropriate permissions, you can log in as that user on a client computer and attempt to access the shared folder using its UNC path. You can then test creating, renaming, and deleting files and folders to verify that the permissions are correctly assigned.
What are the different methods to create a shared folder in Windows Server 2019 as mentioned in the script?
-The script mentions three methods to create a shared folder in Windows Server 2019: using the Server Manager console, using File Explorer, and using the Computer Management console. Additionally, it mentions the command line method but does not go into detail as it is more complicated for permission assignments.
How does sharing a folder through File Explorer differ from sharing through the Server Manager console?
-Sharing a folder through File Explorer is a more user-friendly method that involves right-clicking on the folder, selecting 'Properties', and then the 'Sharing' tab to share the folder. It allows for quick sharing with default permissions. In contrast, sharing through the Server Manager console provides more granular control over permissions and settings, suitable for more complex or secure sharing requirements.
Why is it important to specify NTFS permissions when creating a shared folder?
-Specifying NTFS permissions is important because it allows you to control the access and actions that users can perform on the shared folder at the file system level. This ensures that users have the appropriate level of access and helps maintain the security and integrity of the data stored in the shared folder.
What is the impact of setting sharing permissions to 'Everyone Full Control' at the sharing level?
-Setting sharing permissions to 'Everyone Full Control' at the sharing level allows every user to have full control over the shared folder, which can be a security risk. It is important to carefully consider who needs access and what level of access is appropriate to prevent unauthorized access and potential data breaches.
How can you manage permissions and other settings for a shared folder after it has been created?
-After a shared folder has been created, you can manage its permissions and other settings by selecting the folder, right-clicking, and choosing 'Properties'. From there, you can access the 'Sharing' tab to manage sharing permissions and the 'Security' tab to manage NTFS permissions.
Outlines
👨💻 Introduction to Creating Shared Folders in Windows Server 2019
In this section, the video introduces the topic of creating shared folders in Windows Server 2019. It explains the importance of sharing folders to make data accessible to network users. The process involves using the Server Manager console to create a new shared folder, emphasizing the necessity of permissions and different share profiles available for various scenarios.
🖱️ Setting Up SMB Share Quick in Server Manager
This paragraph details the steps to create a shared folder using the SMB Share Quick profile in Server Manager. The steps include selecting the server, defining the share path, naming the folder, and configuring basic share settings such as access-based enumeration and caching. It also explains how to set NTFS permissions, including customizing permissions by disabling inheritance and assigning specific permissions to security groups.
📂 Verifying Shared Folder Access and Permissions
Here, the video demonstrates how to verify that the shared folder is correctly configured. It shows the process of accessing the shared folder from a client computer, ensuring that users have the appropriate permissions to create and manage files within the shared folder. The section confirms that permissions are properly assigned by creating and renaming folders as an HR user.
🖥️ Creating Shared Folders Using File Explorer
This section covers an alternative method of creating shared folders using File Explorer. It involves creating a new folder, setting share permissions, and verifying access from a client computer. The process includes configuring both share-level and NTFS permissions, emphasizing the difference between them and the impact on user access.
🔧 Creating Shared Folders Using Computer Management Console
The video outlines another method for creating shared folders using the Computer Management console. The steps include selecting the location, setting offline file settings, and configuring permissions. The video also mentions the complexity of using command-line tools for this task and concludes by summarizing the various methods available for creating shared folders in Windows Server 2019.
Mindmap
Keywords
💡Windows Server 2019
💡Share Folder
💡Server Manager Console
💡File and Storage Services
💡Shares
💡SMB Share
💡NTFS Permissions
💡Access-Based Enumeration
💡UNC Path
💡Active Directory Users and Computers
💡File Explorer
💡Computer Management Console
Highlights
Introduction to creating a share folder in Windows Server 2019 for network accessibility.
Using Server Manager Console to create a new share folder.
Accessing File and Storage Services in Server Manager to manage shares.
Overview of existing share folders and the process to create a new one.
Selecting a share profile suitable for general file sharing or specific applications.
Choosing SMB Share Quick for file sharing simulation.
Selecting the server and custom path for the new shared folder.
Creating a new folder named 'HR data' on the domain controller.
Assigning share folder name and setting local and remote paths.
Enabling access-based enumeration to control visibility of files and folders.
Configuring permissions for the share folder.
Disabling inheritance and setting explicit permissions for HR department.
Assigning permissions to HR users for creating files and folders.
Confirmation of share folder creation and its accessibility.
Using File Explorer as an alternative method to create a shared folder.
Setting sharing permissions and NTFS permissions via File Explorer.
Demonstration of creating a 'public folder' with read-only sharing permissions.
Using Computer Management Console to create and manage share folders.
Customizing sharing and NTFS permissions in Computer Management Console.
Verification of shared folder accessibility from a client computer.
Conclusion summarizing the methods to create share folders on Windows Server 2019.
Transcripts
her friends welcome to a mess up the pep
cast in today's video I'm going to show
you the different methods to create a
share folder in Windows Server 2019
sharing folders makes them accessible to
your network users and by sharing
folders user can access the data which
is stored on server from that client
computer which is part of your accurate
to mean based on the permission which is
assigned to your share folders so in the
vast method we are going to use a saw
manager console to create a new share
folder for that you need to open your
saw manager and on your soul manager on
left hand side you will find file and
storage services you need to click on
that and then after you will see shares
so you need to click on shares as well
here you can see a list of share folders
currently exist on your server as you
can see we have two to share food is
currently on our server which is matlock
on an sis wall and it is created
automatically when you promote your
server as a domain controller to create
a new share folder we need to click on
tasks here we have options for new share
so selected on this console as you can
see we need to select a profile for this
share here we have a total 5 share
profile and the by default selected
profile will be a zombie shared quick
which is suitable for a general file
sharing for example if you have a F SRM
install on your server that time you can
use a zombie share advanced or SMB share
applications if you have NFS installed
on your server that time you can use and
FS share quick and NFS advanced for the
simulation I'm going to select SMB share
quick let's click on next here we need
to select our server and in the previous
video we have added our members over to
this server manager console as well and
that's why that server is also listed
here now we want to create a shared
folder on our domain controller that's
why I'm going to select WS to k-19
- this is 0-1 if you want to share your
entire volume that time you can select
select by volume and select the drive
which you want to share but we want to
share a folder that's why we need to
select type a custom path then click on
browse and on a domain controller
I have only one Drive and which is my C
Drive so let's select and to create a
new folder or we need to click on new
folder here I'm going to give name HR
data
okay last select the folder so our local
path will be C colon slash at your data
select the folder and click on next now
what will be the name of the share
folder as you can see as your data
I selected by default you just need to
take care of one thing that don't leave
space in between the name in a share
folder and that we don't have if you
want to add description about the share
food you can this is the local path to
that share food and this is the remote
path to access that share folder as we
come next here we have options for an
able access based enumeration which I
want to enable enabling access based
enumeration means preventing users from
seeing files and folders they do not
have permission to access to see that at
least you need read or equivalent
permission then allow caching of share
is also selected that means offline
users can access the content of this
share folder as well I'm going to click
on next and here we have a options to
customize the permission as you can see
by default share permission will be
everyone full control so if we need to
set up NTFS permission as well so I'm
going to click on customize permissions
to change the permission and the first
thing which I'm going to do is disabling
inheritance let's click on it select
convert inherited permissions into
explicit permission on the subject and
now I want to remove both who uses entry
ok so now we have a system admin status
and created order we want to create the
share folder for our HR department let
me open Active Directory users and
computers
ok let's click on HR oh you here we have
HR user 1 2 & 3 and all those three uses
are a member of Asha users so we are
going to use the security group to
assign permission on that
shareholders as minimize it minimizes
this concern as well okay so let's click
on add click on select a principal you
can select user group or building
security group as well I'm going to use
Azure uses let's click on check name and
fine let's click on OK now here we have
a type of permission so we want to allow
on these folders subfolders and files we
want to click on show advanced
permissions because we want to give them
a permission to create a file and folder
as well and this permission will be
applicable for these folder only fine
let's click on ok so now they are able
to create files and folders under this
folder and once they create any file at
folder they will become creator-owner
and created owner have full control on
subfolders and file
fine let's click on apply and ok and
click on next this is the information
whatever things we have selected that
will be visible to us here let's click
on create to create a shared folder done
the share was successfully created let's
click on close to close this console
let's go back to our saw manager console
and here we go here we have an azure
data if you want to modify any settings
related to this share food you can for
that you need to select the folder right
click on it and go for the properties as
quicken permissions and here from this
console you can manage your permission
other settings will be available to you
on this console as well that's going ok
we want to also confirm that a user can
say the share folder and use a muscle
permission to create a folder under this
a share folder so let's go back to our
client computer on this computer I'm
going to log in as the HR user 1 and
the share food for that I'm going to use
UNC path WS dokie 19 - this is 0-1 here
we have a char data folder let's open it
that means user have at least read
permission as user can access that
folder let me create a new folder here
and on this folder is created by a che
user 1 and if user can rename that
folder
that means user has a permission to
delete that folder as well let's see the
permission of this folder click on
security and here as you can see as I
use a 1 is listed there a sulukim
advance and if we see the permission
about a char user 1 you can see as I use
the one is owner of this folder and that
user has a full control on this folder
as well fine so our permission is
properly assigned to this share folder
as well as the folder or which is
created under the main a root shell
folder fine
now this is the first method in the
second method that is the older one we
can use of File Explorer and by using
File Explorer we can create a share
folder as well so let's open ctrio let
me create one more food
ask you name public folder so that food
must be accessible by our uses let's
select the folder right click on it and
go to the properties here we have a
sharing tab solace click on it we are
not doing for this year we're doing for
@one sharing
let's click on it select share this
folder and this will be the name of a
folder that's quick on permission so if
you want to assign any kind of
permission you can assign it from here
we're going with the everyone a read
permission say general permission will
be everyone full control and then you
have to specify the NTFS permission to
control the permission of that share
folder
fine let's click on OK apply ok and
close only so we have at a sharing level
we have a read-only permission last
check on our client computer sorry
let's look on OK and here we have
public folder as well let's open it and
let's try to create a new folder as you
can see we don't have permission because
at the sharing level we have given the
permission to a read-only
even if user has full control at NTFS
live well
still user is not able to create folder
under this shared folder fine let's
cancel it and thus close it let's go
back to over to main controller we can
also use computer management console to
create share folder as well okay and
here you need to right-click and select
new share click on next browse the
location let's expand Sidra let's make a
new folder shared one will be the name
let's click on ok next and here we have
a certain settings about offline file as
well that we are not going to change
let's become next and here we have a
permission to customize it so the
similar console is there you can change
the sharing permission and NTFS
permission from here working with the
default one that's to come finish let's
go back to a client computer and let's
see whether that folder is there or not
and here we go we have a shared one we
can also use a command not share to
create a share folder but that we are
not going to use because in that command
to assign a permission is very
complicated one so these are the way by
using this methods you can create a
share folder on your Windows Server 2000
19 computer that concludes our video
demonstration thank you all for watching
this with you
Weitere ähnliche Videos ansehen
CSS NC II COC 3: SET UP COMPUTER SERVER. #computersystem #computernetwork #computerrepair #css
DevOps for Freshers | Bài 7: Quyền truy cập trong Linux | DevOps cho người mới bắt đầu
How to Access CCNA Physical Racks: Step-by-Step Guide for Beginners! | #networkershome
Quick Tutorial - Users and Permissions in SQL Server
Creating users and groups in Windows 10, and controlling file permissions
How to Configure LAN Segments in VMware Workstation Pro
5.0 / 5 (0 votes)