Securing Folders And Files In Vista Part VII

It is easy to get lost in NTFS permissions considering that there are folder permissions and file permissions (as well as a set of special access permissions). Here are some fast tips you can use when granting NTFS permissions:

• Try to assign NTFS permissions to folders rather than individual files and make sure that the files are set to inherit their permission from the folder. (That’s the default setting, so you don’t have to check every single file.)

• Create folders according to access requirements — for example, a folder for files that Marketing needs, another for files that Engineering needs, and so on, and assign NTFS permissions to those folders for the users who need them.
• To prevent users from accidentally deleting important applications or data, remove the Everyone permission and assign the Read & Execute permission to the Users group and the Administrators group for the folder.
• As with sharing permissions, give users only the access level that they require. In most cases, Full Control should reside only with the CREATOR OWNER group.
• Don’t use Deny except when it is necessary because it can create administrative headaches later.