Chapter Summary

• There are several ways to configure sharing on a network, including using Simple File Sharing, setting share permissions, and setting NTFS permissions.

• Multiple permissions affect a user’s access level. When share and NTFS permissions are applied, the cumulative permissions of both are determined, and the most restrictive of those create the user’s effective permission.

• A user’s group membership can determine the level of access to the computer and its files and folders. When a user is a member of multiple groups, the permissions of the groups are compared, and the least restrictive set of permissions is applied.

• Local policies can restrict how users log on, what their passwords must consist of, and what they can access and change after they have logged on to the computer.

• Group Policy settings can restrict the user’s desktop, Start menu, and taskbar and what the user can access and change after her or she is logged on to the computer.

• When multiple Group Policy configurations exist, domain policies always override local policies.