CompTIA A+ Certification All-in-One Exam Guide

ownership. Owners can do anything they want to the files or folders
they own, including changing the permissions to prevent anybody,
even administrators, from accessing them.
• Take Ownership permission With the Take Ownership permission,
anyone with the permission can seize control of a file or folder.
Administrator accounts have Take Ownership permission for
everything. Note the difference here between owning a file and
accessing a file. If you own a file, you can prevent anyone from
accessing that file. An administrator whom you have blocked,
however, can take that ownership away from you and then access that
file!
• Change permission Another important permission for all NTFS files
and folders is the Change permission. An account with this permission
can give or take away permissions for other accounts.
• Folder permissions Folder permissions define what a user may do to
a folder. One example might be “List folder contents,” which gives the
permission to see what’s in the folder.
• File permissions File permissions define what a user may do to an
individual file. One example might be “Read and Execute,” which
gives a user account the permission to run an executable program.
The primary way to set NTFS permissions is through the Security tab
under the Properties of a folder or file (see Figure 13-19). The Security tab
contains two main areas. The top area shows the list of accounts that have
permissions for that resource. The lower area shows exactly what permissions
have been assigned to the selected account.