Tip
Subject Content

147
Understand permission inheritance on a Windows 2000 Server

Windows 2000 is shipped with an improved Access Control List Editor, which is apparent from the

completely redesigned user interface. To view the new interface, right-click any file or folder in

Windows Explorer and select the Security tab. (Note that this only works on NTFS volumes.)



Behind the new interface lies a new inheritance model. Once you're on the Security tab, click

Advanced to see the Advanced Security Settings dialog box. At the bottom of the dialog box, you'll

notice two check boxes.



The first check box (Inherit From Parent The Permission Entries That Apply To Child Objects) is

checked by default on most folders. This setting means that the current folder will inherit all

permissions defined on its parent.



This is where the new inheritance model steps in. Instead of individually assigning permissions on

folders and subfolders, you can assign permissions to the topmost folder, and all subfolders will

inherit them. This happens instantly and without any further administration.



If you don't want the inheritance, uncheck this box. When you do, a dialog box appears: You can

choose to copy all the permissions from the parent folder, remove all the permissions that were

previously applied because of the inheritance, or cancel the action.

Page 147 of 237
First Previous Next Last