Microsoft® Windows® Security: Essentials

The Essentials and Beyond

In this chapter, you learned about permissions that you can assign to NTFS drives, shares, Active Directory, and the Registry. These permissions share many common characteristics. If a user is assigned multiple permissions, the resulting permission is a combination of all permissions assigned unless a user is denied permissions. Deny always takes precedence, so if a user is granted Allow and Deny for the same permission, the result is Deny. Permissions are inherited by default (except in the Registry), but you can disable inheritance. You can enable inheritance for the Registry. When you move or copy files, the NTFS permissions stay the same if you move the files on the same partition. Any other time (such as when you ...