Professional Windows Server 1002003 Security A Technical Reference [Electronic resources] نسخه متنی

Attributes

By selecting multiple files



or
folders in My Computer or Windows Explorer, you can perform many of
the previously mentioned tasks simultaneously on the selected files
or folders. When multiple files are selected and their collective
properties viewed, a checked attribute checkbox with a gray interior
indicates that some of the selected files have the attribute set and
others have it cleared.

If you set the Hidden attribute for a file on the desktop and My
Computer is configured to hide hidden files from view, the file will
remain visible but ghosted until you log off and then log on again,
at which time it will be hidden from view.

There is another type of attribute called System on both FAT/FAT32
and NTFS volumes. The System attribute is not accessible from the GUI
and can be accessed only from the command line using the
attrib command. Critical operating-system files
have their Read-only, Hidden, and System attributes all set by
default.

If the Hidden attribute for a file has a checked attribute checkbox
with a gray interior, it means the file has both its Hidden and
System attributes set.

The term

attribute has a different meaning in
the context of Active Directory.

Compression

You can't both compress and encrypt a file at the
same time.

You must have NTFS write



permission
on a file or folder in order to compress it. In order to compress a
file, you need enough free space on the disk to hold the file in both
its compressed and uncompressed states.

Encryption

You can't encrypt a file that is marked Read-only or
System.

If you copy or move an encrypted file within or between NTFS volumes,
it remains encrypted. If you copy or move it to a FAT/FAT32 volume or
a floppy disk, it is decrypted.

Encrypt only datafiles; encrypting program files adds unnecessary
system overhead.

When encrypted files are copied between computers over the network,
the data is sent in an unencrypted state. To encrypt data sent over a
network, you must use SSL or IPSec.

Remember, to read an encrypted file, you don't have
to decrypt it manuallyWS2003 does that automatically for you.
You need to decrypt a file only when you want to share its contents
with other users.

Folders are actually not encrypted themselves, just marked as such.
The marker tells the operating system that any files that are later
added to the folder should be encrypted, if they
aren't already.

Encrypted files can't be accessed by Macintosh
clients.

Backups of encrypted files are also encrypted, provided they are on
NTFS volumes.

If you have partitions in a WS2003 system that are formatted using
NTFS for NT 4.0 or earlier and you attempt to encrypt files on this
volume, a chkdsk operation is run and the
filesystem is converted to the WS2003 version of NTFS.

Users with roaming user profiles can use the same encryption key with
trusted remote systems.

See Also

assoc, attrib,
cipher,

Disks ,
expand, ftype,

Permissions ,

Shared
Folders , takeown