Download (direct link):
* To change the NTFS permissions of a subfolder to be different than its parent, click the Security tab for the subfolder, click the Advanced button, and clear the check box that says Inherit From Parent The Permission Entries That Apply To Child Objects. At that point, you can assign different NTFS permissions, which by default will then flow downward to sub-subfolders and files.
Connecting to Shared Resources
You can connect to shared resources on a Microsoft network in several ways, including the following:
* Mapped drives: These are network shares that associate with a drive letter. (Create drive mappings by right-clicking a network folder and choosing Map Network Drive. See Figure 11-5.) Creating mapped drives is not the best practice anymore, largely because there are only so many letters in the alphabet. However, many users are accustomed to accessing the network this way - largely because it was the only way available in years past.
Figure 11-5: Mapping a network drive.
* Universal Naming Convention (UNC) paths: These are path names of the format \\server\folder\file, where the server part of the name is the computer's legacy (NetBIOS) name.
* My Network Places: Formerly 'Network Neighborhood' (why does Microsoft change these names?), this virtual folder lives on the desktop if you activate the icon via the Display control panel, and lets users connect to any servers on the LAN or WAN - subject to server availability and access restrictions.
Instant Answer If you can't connect to a shared folder on a remote computer by using a UNC name, your connection's TCP/IP property sheet may not be properly configured to find a WINS server, or no WINS server may be available on the network at that moment. WINS servers let you find a computer on a TCP/IP network by using the NetBIOS computer name.
Another type of shared resource is an intranet Web server or a public Internet site, and the exam will expect you to know something about Internet Explorer's security zones. You control these through the Internet Options control panel's Security tab.
Time Shaver You probably won't need to memorize every little detail of Internet security zones. Here are the key points you should try to remember:
* A zone is a collection of intranet or Internet sites having the same access control characteristics.
* Internet Explorer defines four zones, as follows:
* Local intranet
* Trusted sites
* Restricted sites
* All sites that you don't explicitly include in one of the other zones fall by default into the Internet zone.
* Each zone can have one of four security levels:
* High (excludes potentially damaging content)
* Medium (warns before running potentially damaging content)
* Low (doesn't warn)
* The default security levels for each zone are:
* Local intranet (medium)
* Trusted sites (low)
* Internet (medium)
* Restricted sites (high)
* You can change the security level of a zone, to another of the predefined security levels or to a custom security level.
You can add intranet or Internet sites to the trusted sites, restricted sites, or local intranet categories. Just choose the category by clicking it and then click the Sites button. Type the site's Uniform Resource Locator (URL) in the field labeled 'Add this Web site to the zone.' (Sites that already live in the specified zone appear in the field labeled 'Web sites.')
Web Server Access Control
Windows XP Professional comes with Internet Information Server (IIS) Version 5.1, although the software doesn't install with the operating system unless you're upgrading a system with an earlier version of the Microsoft Web server software (that is, an earlier version of IIS, or the even older Personal Web Server or PWS). IIS lets you share resources on your computer with users running Web browsers or FTP utilities.
Installing Internet Information Services (IIS)
Installing IIS is easy, as long as you have the Windows setup files available on CD or network server, but you should heed a few tidbits before you do it:
* Install IIS onto an NTFS disk for security reasons.
* Install TCP/IP first, if you haven't already.
* Don't install IIS onto a PC that's already huffing and puffing under XP's increased processor and memory demands. IIS and its related services are likely to stress out low-end hardware and reduce the performance of foreground applications.
* Consider setting up a DNS server on your network if you don't already have one. DNS lets users connect to resources via friendly domain names, like corphq.acme-cognac.com.
Use the Add/Remove Programs control panel to install IIS. Click the Add/Remove Windows Components button at the left, then check the box labeled Internet Information Services (IIS).
Instant Answer By default, Windows XP installs common files, documentation, FrontPage 2000 server extensions, the IIS snap-in, the SMTP service, and the WWW service. If you also want FTP, or if you want to exclude any of the default components, you have to click the Details tab and deal with the relevant check boxes. Otherwise, click Next, and the wizard does its wizardry, albeit slowly!