Chapter 14. Data Sharing, Security, and Auditing

Data sharing allows remote users to access network resources, such as files, folders, and drives . When you share a folder or a drive, you make all its files and subfolders available to a specified set of users. If you want to control access to specific files and subfolders within a shared folder, you can only do it with NT file system volumes. On NTFS volumes you use access control lists to grant or deny access to files and folders.

Object security applies to all resources on NTFS volumes. It includes files, folders, and Active Directory objects. Normally, only administrators have the right to manage Active Directory objects, but you can delegate to users the authority to manage Active Directory objects. When you do, you make information in Active Directory directory service available for viewing and modification by designated users. You control these users' permissions through access control lists. By auditing access to objects, you can closely monitor network activity and ensure that only authorized users are accessing resources.