Lesson 1: Sharing Resources CHAPTER 8 433 FIGURE 8-13 Libraries from the command line You can add folders to an existing library by editing that library’s properties and clicking Include A Folder, as shown in Figure 8-14. You can use the same Properties page to remove existing folders from a library. You can create a new library by navigating to the Libraries folder and clicking New Library. You will create a new library in the practice exercise at the end of this lesson. FIGURE 8-14 Library locations 4 3 4 CHAPTER 8 BranchCache and Resource Sharing Sharing Printers Shared printers allow users on the network to send documents to a printer that is connected to a computer running Windows 7. To share a printer, enable printer sharing in HomeGroup or in Advanced Sharing Settings and then locate the printer within Devices And Printers. Right-click the printer that you wish to share, click Printer Properties, click the Sharing tab, and then enable Share This Printer, as shown in Figure 8-15. If you are going to be sharing a printer with computers running previous versions of Microsoft Windows, you can add the drivers for the printer using Additional Drivers. When you add additional drivers, other computers on the network that do not have the printer drivers installed are able to download them from the computer that is sharing the printer. FIGURE 8-15 Printer sharing options When you share a printer, the Everyone group is assigned the Print permission by default, as shown in Figure 8-16. This means that all members of the HomeGroup or any user that is a member of the domain in a domain environment can send print jobs to the printer. If several people use the printer, you may wish to assign one of the other available permissions to allow better printer management. The available permissions are: n Print This permission allows a user to print to the printer and rearrange the documents that they have submitted to the printer. n Manage This Printer Users assigned the Manage This Printer permission can pause and restart the printer, change spooler settings, adjust printer permissions, change printer properties, and share a printer. Lesson 1: Sharing Resources CHAPTER 8 435 n Manage Documents This permission allows users or groups to pause, resume, restart, cancel, or reorder the documents submitted by users that are in the current print queue. FIGURE 8-16 Printer sharing properties More Info MANAGE PRINTER PERMISSIONS To learn more about managing printer permissions, consult the following page on TechNet: http://technet.microsoft.com/en-us/library/cc773372(WS.10).aspx. eXaM tIP Remember what permissions to assign a group to allow them to manage their own documents, but not to manage other documents submitted to a shared printer. Practice Sharing Resources Rather than deploying a dedicated file server, many small businesses use shared folders hosted off workstations as a method of sharing documents. In this practice, you configure Windows 7 to share data using the built-in HomeGroup functionality as well as sharing through the creation of dedicated shared folders. 4 3 6 CHAPTER 8 BranchCache and Resource Sharing exercise 1 Configuring Libraries and HomeGroup Settings In this exercise, you create a new library and then share it. You also modify the HomeGroup password from the one created during setup to one that is easier for other users of the HomeGroup to remember. 1. Log on to computer Canberra using the Kim_Akers user account. 2. Using Windows Explorer, create the C:\Data, C:\Moredata, and the C:\Evenmoredata folders. 3. Click Start. In the Search Programs And Files text box, type Libraries. On the Start menu, click Libraries. This opens the Libraries virtual folder, as shown in Figure 8-17. FIGURE 8-17 The Libraries virtual folder 4. Click the New Library item. This creates a new library. Name the library Scientific_Data. 5. Right-click the Scientific_Data folder and then choose Properties. This opens the Scientific_Data Properties dialog box. Click Include A Folder, navigate to and select the C:\Data folder, and click Include Folder. Repeat this step for the C:\Moredata and C:\Evenmoredata folders. 6. Verify that the Scientific_Data Properties dialog box matches Figure 8-18, and then click OK. 7. Right-click the Scientific_Data library, choose Share With, and then click HomeGroup (Read). 8. If you are presented with the File Sharing dialog box, shown in Figure 8-19, click Yes, Share The Items. Lesson 1: Sharing Resources CHAPTER 8 437 FIGURE 8-18 Library properties FIGURE 8-19 Share items 9. Click Start. In the Search Programs And Files text box, type HomeGroup. In the Start menu, click the HomeGroup item. This opens the HomeGroup control panel. 10. Click the Change The Password item. On the Change Your HomeGroup Password dialog box, click Change The Password. 4 3 8 CHAPTER 8 BranchCache and Resource Sharing 11. On the Type A New Password For Your HomeGroup page, enter the password P@ssw0rd and then click Next. 12. Verify that your HomeGroup password settings match those shown in Figure 8-20, and then click Finish. FIGURE 8-20 HomeGroup password changed exercise 2 Advanced Folder Sharing In this exercise, you share a folder using the Create A Shared Folder Wizard. You would use this method to share a folder when you connect your computer to a Domain network. When you connect your computer to a domain network, you cannot use the HomeGroup functionality of Windows 7, though it is possible to share libraries directly. 1. If necessary, log on to the Canberra computer using the Kim_Akers user account. 2. Open an elevated command prompt and issue the following commands: Net localgroup Management /add Net localgroup Secretariat /add Mkdir c:\shared_folder 3. Type exit to close the elevated command prompt. 4. Click Start. In the Search Programs And Files text box, type Computer Management. In the Start menu, click Computer Management. This opens the Computer Management console. 5. Expand the System Tools\Shared Folders node. Right-click the Shares node and then choose New Share. This starts the Create A Shared Folder Wizard. Click Next. 6. In the Folder Path: text box, type c:\shared_folder, as shown in Figure 8-21, and then click Next. Lesson 1: Sharing Resources CHAPTER 8 439 FIGURE 8-21 Specifying a shared folder path 7. In the Name, Description, And Settings page, accept the default settings, and then click Next. 8. On the Shared Folder Permissions page, select Customize Permissions and then click Custom. 9. On the Share Permissions tab, select the Everyone group and then click Remove. Click Add. In the Select Users Or Groups dialog box, type Management; Secretariat and then click OK. 10. Configure the Secretariat group with the Read (Allow) permission. Configure the Management group with the Change (Allow) permission, as shown in Figure 8-22. Click OK. FIGURE 8-22 Custom share permissions 4 4 0 CHAPTER 8 BranchCache and Resource Sharing 11. Click Finish twice to close the Create A Shared Folder Wizard. 12. From an elevated command prompt, issue the command net share shared_folder to verify that the Management group is assigned the Change permission and the Secretariat group has been assigned the Read permission. Lesson Summary n HomeGroups can be used on networks that have the Home network location designation. They make it easier to share resources in environments without AD DS. n Libraries are collections of folders. You can share libraries with the HomeGroup. n Shared folders allow individual folders to be shared. Sharing options for folders are more detailed than for Libraries. n You can manage shared folders through the Computer Management console, Windows Explorer, and the Net Share command. The Computer Management console allows for the centralized administration of shared folders. n The Read printer permission allows users to control their own documents. The Manage Documents permission allows users to manage all documents submitted to the printer. The Manage Printers printer permission allows users to control printer settings and configure printer permissions. Lesson Review You can use the following questions to test your knowledge of the information in Lesson 1, “Sharing Resources.” The questions are also available on the companion DVD if you prefer to review them in electronic form. note ANSWERS Answers to these questions and explanations of why each answer choice is correct or incorrect are located in the “Answers” section at the end of the book. 1. You are responsible for maintaining a computer running Windows 7 Enterprise that is used in a university laboratory and is hooked up to four different scientific instruments. Each of these instruments outputs its data to a directory named Data. Each instrument’s data directory is located on a different volume on the computer’s hard disk drive. You want to share this data with other computers in the laboratory through the common HomeGroup. Which of the following should you do? (Choose all that apply; each answer forms part of a complete solution.) a. Share each Data folder. B. Create a library named Sci_Data. c. Add each instrument’s separate Data folder to the Sci_Data library. D. Share the Sci_Data library using the HomeGroup control panel. Lesson 1: Sharing Resources CHAPTER 8 441 2. You do consulting work for a small business. This small business has a single color laser printer. This printer is shared off the administrative assistant’s client running Windows 7. The administrative assistant is not a member of the local Administrators group. You want to allow the administrative assistant to reorder jobs in the print queue and delete them if necessary. The administrative assistant should be able to do this to any documents in the queue. The administrative assistant should not be able to reconfigure printer permissions. Which of the following should you do to accomplish this goal? a. Assign the administrative assistant the Print permission. B. Assign the administrative assistant the Manage This Printer permission. c. Assign the administrative assistant the Manage Documents permission. D. Add the administrative assistant’s account to the Power Users group. 3. Which of the following tools can you use to determine which shared folders a client running Windows 7 hosts and the local folders that are associated with those shares? (Choose all that apply.) a. The Net Share command B. The Computer Management console c. Libraries D. Network And Sharing Center 4. You have created a local group on a client running Windows 7 named Accounting. Which of the following share permissions should you assign to the accounting group to ensure that users are able to add, modify, and delete files located in the Accounting shared folder without giving members of the group the ability to modify shared folder permissions? a. Read B. Modify c. Full Control D. Owner 5. Which of the following Advanced Sharing Settings options should you configure to ensure that shared resources on a client running Windows 7 are visible to all other computers in the HomeGroup? a. Public Folder Sharing B. File Sharing Connections c. Password Protected Sharing D. Network Discovery 4 4 2 CHAPTER 8 BranchCache and Resource Sharing Lesson 2: Folder and File Access In many Windows 7 deployments, multiple people have to use the same computer. When multiple people use the same computer and store their files locally, it becomes necessary to ensure that some form of security exists so that one user is able to look at another user’s files only if he has the appropriate permissions. Windows 7 allows you to do this through file and folder permissions, as well as encryption through Encrypting File System (EFS). After this lesson, you will be able to: n Configure file and folder permissions. n Resolve effective permissions issues. n Encrypt files and folders. Estimated lesson time: 40 minutes File and Folder Permissions You can apply NTFS file and folder permissions to individual user accounts or groups. NTFS file and folder permissions determine access rights to files and folders. These access rights apply whether the user logs on directly to the client running Windows 7 or is accessing the client running Windows 7 over the network. You can set file and folder permissions only to files and folders hosted on NTFS volumes. It is not possible to set file and folder permissions to files and folders hosted on FAT or FAT32 volumes. There are six standard permissions that can be assigned to a file or a folder. These permissions include the following: n Full Control When applied to folders, allows the reading, writing, changing, and deletion of files and subfolders. When applied to a file, permits reading, writing, changing, and deletion of the file. Allows modification of permissions on files and folders. n Modify When applied to folders, allows the reading, writing, changing, and deletion of files and subfolders. When applied to a file, permits reading, writing, changing, and deletion of the file. Does not allow the modification of permissions on files and folders. n Read & Execute When applied to folders, allows the content of the folder to be accessed and executed. When applied to a file, allows the file to be accessed and executed. n List Folder Contents Can be applied only to folders, allows the contents of the folder to be viewed. n Read When applied to folders, allows content to be accessed. When applied to a file, allows the contents to be accessed. Differs from Read & Execute in that it does not allow files to be executed. n Write When applied to folders, allows adding of files and subfolders. When applied to a file, allows a user to modify, but not delete, a file. . folder, as shown in Figure 8- 17. FIGURE 8- 17 The Libraries virtual folder 4. Click the New Library item. This creates a new library. Name the library Scientific_Data. 5. Right-click the Scientific_Data. Sharing dialog box, shown in Figure 8-1 9, click Yes, Share The Items. Lesson 1: Sharing Resources CHAPTER 8 4 37 FIGURE 8-1 8 Library properties FIGURE 8-1 9 Share items 9. Click Start. In the. rights apply whether the user logs on directly to the client running Windows 7 or is accessing the client running Windows 7 over the network. You can set file and folder permissions only to files