Managing File Systems
File and Folder Permissions
Permissions and Rights
- Windows distinguishes two types of access privileges: permissions and rights.
- A permission is the ability to access a particular object in some defined manner-for example, to write to an NTFS file or to modify a printer queue.
- A right is the ability to perform a particular systemwide
action, such as logging on or resetting the clock.
- The owner of a resource (or an administrator) assigns permissions to the resource via its properties dialog box. For example, if you are the printer owner or have administrative privileges, you can restrict someone from using a particular printer by visiting the properties
dialog box for that printer.
- Administrators set rights via the Local Security Policy console.
(This console is available only in the Professional, Enterprise, and Ultimate editions of Windows 7. In the other editions, rights for various security groups are predefined and unchangeable.) For example, an administrator could grant someone the right to install a device driver.