Share via


Secure a file or folder

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To secure a file or folder

  1. Open Windows Explorer, and then locate the file or folder you want to secure.

  2. Right-click the file or folder, click Properties, and then click the Security tab.

  3. In Group or user names, click the group or user that you want to change permissions for.

  4. For users and groups that do not need the permission, clear the appropriate Allow check box, particularly for Full Control.

  5. For the users and groups that need to use the file or folder, select the appropriate Allow check box for the permissions that are needed.

  6. Repeat steps 3-4, as needed.

Notes

  • To open Windows Explorer, click Start, point to All programs, point to Accessories, and then click Windows Explorer.

  • The process of securing a file, folder, or other computer resource is sometimes called lockdown.

  • Files and folders usually are sufficiently locked down by default.

  • Incorrect permissions can cause security vulnerabilities and access problems, so locking down should be done cautiously and only when security considerations require it.

  • Share permissions, not just NTFS permissions, can prevent access to a file or folder. Share permissions are not included in effective permissions calculations.

  • An administrator can take ownership of any file on the computer.

  • In the Windows Server 2003 family, the Everyone group no longer includes the Anonymous Logon group.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Concepts

Ownership
Take ownership of files or other objects
Restore files and directories