Lab 1 ACL

.pdf

School

Chicago State University *

*We aren’t endorsed by this school

Course

341

Subject

Information Systems

Date

Oct 30, 2023

Type

pdf

Pages

Uploaded by ChancellorHamsterMaster1035

Name: ___________________________ Points: ___ / 30 Page 1 of 3 CPSC 42000 Lab Exercise 1: Modifying ACLs in Windows The purpose of this lab is to familiarize you with the Windows implementation of ACLs (Access Control Lists), especially its permissions inheritance mechanism, and to gain skills in modifying permissions. 1. Viewing Windows ACLs Log in to a computer running Windows 10 or 11 and open a Windows Explorer (file browser) window. Navigate to your home folder , which is at “C: \Users\<your username> ”. Right-click on the “Documents” folder and select “Properties” , then navigate to the “Security” tab . Click through all user and group names to see what permissions they have. List the groups only here: SYSTEM , Jayrell Garcia , Administrators Exit this dialog with “Cancel”. 2. Adding the Guest account to a folder’s ACL Create a folder named “testfolder” inside “Documents” and view this new folder’s security tab. Click on the Edit button in the security pane, then Add . This is the “Object Picker” UI that lets you select from among system elements. Try to find which Object Types there are. What are they? (Note: we might call these subject types.) Users , Groups, Built in Secuity principles, and others In the object box, type in “guest” , then use the Check Names function. It should find the guest user and add the domain prefix to the name. If not, check your typing. Then press OK to confirm and go back to the previous dialog box. Note the default ‘allow’ permissions that were added for the guest user. Write them down here: Read & Execute, list folder contents, and read Press OK to close the dialog and make these changes permanent.

3. Learning about ownership Open the “Security” tab again for the same folder, then click the Advanced button. Remember that the owner subject for a given item has special status. What is the procedure for changing the owner of this folder? (Once you see how it’s done, go back out; don’t actually do it.) To change click on “Change” and select the desired new owner Click the Permissions tab. Then click the “ Add ” button. In the window that appears, select yourself as a principal and then view the advanced permissions, so you can see the full list of different types of access rights. How many are there? There are 14 Exit out of all the dialogs with Cancel . 4. Inheritance and locking yourself out. Now make another folder inside of “ testfolder ” , called “ inside1 ” . Now check its permissions. It inherited the new access that you gave to the guest account. Go to the Edit dialog for the guest user. Why are the checked boxes greyed out? Since its permissions were inherited , this also meant that because testfolder was not allowed to alter permissions, neither can inside1 Now go back up to the first folder “testfolder” that you made, right-click and go to its security properties and the Advanced page again. Click Disable Interitance , and in the dialog that pops up, select “Remove all inherited permissions from this object.” Exit out of the dialogs with OK, then try to enter the folder. You d on’t have access to it anymore! If your account is an administrator account, you can click continue to get your permissions back. If not, don’t worry, the next step will fix it. Right-click on the folder, go back to the security tab, and click Enable Inheritance to restore the previous settings. Discuss potential pros and cons of the way Windows causes ACLs to be inherited. The Pros are that inheritance allows for efficient and centralized management of permissions, which also reduces the likelihood of misconfigurations or accidental permission changes at lower levels. As a result, inheritance facilitates easier auditing and tracking of permissions. By setting permissions at higher levels and having them inherited, it's simpler to monitor and audit who has access to what, as the permissions are standardized. The cons are that inheritance can become complex when dealing with special cases or exceptions. There may be instances where specific subfolders or files need different permissions, requiring a detour from inheritance. This also ties into cases where if a parent folder has overly permissive

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version