Chapter 4. Managing and Maintaining Access to Resources

Objectives

This chapter covers the following Microsoft-specified objectives for the "Managing and Maintaining Access to Resources" section of the Managing and Maintaining a Microsoft Windows Server 2003 Environment exam:

Configure file system permissions

• Verify effective permissions when granting permissions

• Change ownership of files and folders

• The purpose of this objective is to teach you how to control the access and the type of access allowed to files and folders in the Windows Server 2003 environment. You need to know not only how to grant permissions, but also what the cumulative effect is when combining file and folder permissions.

Configure access to shared folders

• Manage shared folder permissions

• The purpose of this objective is to teach you how to configure and manage user access to the shared folders created in Windows Server 2003.

Troubleshoot access to files and shared folders

• The purpose of this objective is to teach you how to troubleshoot problems related to file and folder access in the Windows Server 2003 environment.

Manage a web server

• Manage Internet Information Services (IIS)

• Now more than ever, it is very important that you properly install and manage Internet Information Services (IIS) in the Windows Server 2003 environment. With all the exploits targeted at IIS, it is essential that you keep your IIS 6.0 server locked down so that it doesn't become an easy target for hackers or viruses.

Outline

Introduction			162
Configuring File System Permissions			162
Configuring and Managing Shared Folders			163
	Creating and Managing Shared Folders		163
		Administrative Shares	168
		Publishing a Shared Folder in Active Directory	169
	Managing Shared Folder Permissions		170
	Connecting to Shared Folders		172
	Configuring and Managing NTFS File and Folder Permissions		174
		Special Permissions	177
	Managing Permissions Inheritance		181
	Changing Ownership of Files and Folders		183
	Verifying Effective Permissions When Granting Permissions		186
	Copying and Moving Files and Folders		187
Combining Share and NTFS Permissions			188
Troubleshooting Access to Files and Shared Folders			189
Managing Access to Shared Files Using Offline Caching			191
Managing Internet Information Services (IIS) 6.0			196
	Installing Internet Information Services (IIS)		196
	Reliability		199
	Management		202
		IIS Management Using Administrative Scripting	202
		IIS Management Through Manually Editing the Metabase	203
		IIS Management Using the IIS Manager MMC	204
		Managing the Default Website	204
		Creating a Website	209
		Hosting Multiple Websites	211
	Managing Security for IIS		215
Chapter Summary			223
	Key Terms		223
Apply Your Knowledge			224

Study Strategies

• The sections in this chapter outline features that are basic to using and managing a Windows Server 2003 server. A server is basically useless unless you have an easily manageable mechanism to share resources.

• A key part of this chapter is the configuration and management of shared folders. You need to know how to configure access to shared folders and how to troubleshoot shared folder access problems.

• The process of working with share and NTFS permissions has always been a major focus on Microsoft exams. Make sure you have a complete understanding of how the different permissions are applied when you access a folder over the network versus accessing it from the server console.

• This chapter covers the management and configuration of Offline Folders Services. In addition to knowing how to properly configure Offline Folders to access your server, you need to be able to configure Synchronization Manager to keep the all copies of the files current.

• Know how to configure IIS and its various features. A lot of options and scenarios are available in IIS 6.0. The best strategy is to install it, set up several test websites to get a feel for how IIS works, and try some of the various configuration options.