Courses Job Ready Program Fresher Trainings AI For Class 7 to 12 Corporate Training Placements Tutorials
Free Learning Resources

IT Tutorials & Interview Prep

Free guides, interview Q&As, and job responsibility breakdowns — curated by industry veterans to help you crack MNC interviews

166+
Tutorial Articles
8
Topic Categories
100%
Free to Read
← Back to Windows Server & Hybrid Administration (AZ-800 )

Chapter 7 : File Server & Permissions

Windows Server & Hybrid Administration (AZ-800 ) Last Updated: Jun 06, 2026

7.1 Introduction to File Server

A File Server is a server used to store, manage, and share files across a network. It allows multiple users and computers to access centralized data from one location instead of storing files separately on individual systems.

In enterprise environments, file servers are very important because organizations need a secure and organized way to store company data such as documents, reports, presentations, software files, backups, and departmental resources.

A file server helps administrators manage files centrally while providing controlled access to users and departments.

 

---------------------------------------------------------------------

Role in Enterprise Environments

In organizations, employees from different departments often need to access shared files regularly. A file server provides a centralized location where all users can store and retrieve data based on assigned permissions.

Examples of enterprise use:

    • HR department storing employee records
    • Finance department managing reports
    • IT department sharing software tools
    • Teams collaborating on shared documents

File servers improve collaboration and make data management easier for administrators.

---------------------------------------------------------------------

Centralized File Storage and Management

One of the biggest advantages of a file server is centralized storage.

Instead of saving files on different computers, organizations store data in a central server location. This helps administrators manage:

    • File storage
    • User access
    • Backups
    • Security permissions
    • Data organization

Benefits of centralized management:

    • Easier file access
    • Better security
    • Simplified backup management
    • Reduced data duplication
    • Improved collaboration

Centralized storage also reduces the risk of data loss caused by local system failures.

---------------------------------------------------------------------

Benefits Over Local Storage

Local storage means files are stored individually on personal computers. This creates several problems in enterprise environments such as data duplication, security risks, and difficulty in sharing files.

File servers provide many advantages over local storage.

 

Advantages of File Servers

    • Centralized data management
    • Easier file sharing
    • Better security control
    • Simplified backup process
    • Reduced storage redundancy
    • Improved accessibility
    • Easier administration

---------------------------------------------------------------------

Problems with Local Storage

    • Difficult file sharing
    • Data loss risk
    • No centralized backup
    • Limited security management
    • Data inconsistency

Because of these benefits, organizations prefer file servers instead of relying only on local computer storage.

 

Importance of File Servers

File servers are important because they help organizations:

    • Manage business data efficiently
    • Improve collaboration
    • Secure sensitive files
    • Maintain centralized backups
    • Control user permissions

Without file servers, managing organizational data becomes difficult, especially in large enterprise networks.

---------------------------------------------------------------------

Example:

 A company stores all departmental documents on a Windows Server File Server. Employees access shared folders through the network according to their assigned permissions. The IT department manages backups, security, and access centrally from the server.

═════════════════════════════════════════════

 

7.2 File Server Installation (Windows Server)

Windows Server provides built-in features that allow administrators to configure and manage file servers easily. The File Server role is installed using File and Storage Services available in Server Manager.

A properly configured file server helps organizations manage storage resources efficiently while providing secure access to shared data.

 

File Server Role Overview

The File Server role allows Windows Server to function as a centralized storage and file-sharing server.

Main functions of the File Server role:

    • File sharing
    • Centralized storage
    • Permission management
    • Network access management
    • Data organization

After enabling the File Server role, administrators can create shared folders and assign permissions to users and groups.

 

File and Storage Services

File and Storage Services is a Windows Server feature used to manage storage resources and file sharing.

It helps administrators manage:

    • Hard disks
    • Volumes
    • Shared folders
    • Storage pools
    • File permissions

This feature provides centralized management for storage-related tasks in Windows Server environments.

 

Server Manager Basics

Server Manager is the primary management console used in Windows Server.

 

 

Administrators use Server Manager to:

    • Install server roles
    • Configure server features
    • Monitor server status
    • Manage storage
    • Configure file services

Server Manager simplifies server administration by providing a centralized interface for management tasks.

---------------------------------------------------------------------

Storage Volumes and Drives

Before storing files on a file server, storage devices must be properly configured.

Windows Server organizes storage using:

    • Disks
    • Partitions
    • Volumes
    • Drive letters

 

Storage Volume

A storage volume is a logical section of storage space used to store files and folders.

Common volume types include:

    • Simple Volume
    • Spanned Volume
    • Mirrored Volume

 

Importance of Proper Storage Planning

Proper storage planning helps organizations:

    • Improve performance
    • Organize data efficiently
    • Manage backups easily
    • Increase storage reliability

Administrators usually separate operating system files and shared data into different storage volumes for better management.

---------------------------------------------------------------------

Importance of File Server Installation

Proper file server configuration helps organizations achieve:

    • Centralized file management
    • Secure file sharing
    • Better storage organization
    • Improved accessibility
    • Simplified administration

Incorrect storage configuration may lead to:

    • Data loss
    • Storage issues
    • Performance problems
    • Security risks

 

Example:

 An organization installs the File Server role on Windows Server to store departmental data centrally. Separate storage volumes are created for HR, Finance, and IT departments, and users access their departmental folders through the company network
 ---------------------------------------------------------------------

7.3 Folder Sharing Concepts

Folder sharing is the process of allowing users and computers on a network to access files and folders stored on a server. Shared folders are commonly used in organizations so employees can collaborate and access centralized resources.

In Windows Server, administrators can configure folder sharing to control who can access specific files and what actions users are allowed to perform.

Folder sharing improves collaboration, centralized management, and data accessibility in enterprise environments.

 

What is a shared folder?

A Shared Folder is a folder made available over the network so authorized users can access it from other computers.

 

 

Users can:

    • Open files
    • Save documents
    • Modify data
    • Share resources

Access to shared folders depends on the permissions assigned by administrators.

Example: A company may create shared folders such as the following:

    • HR Documents
    • Finance Reports
    • Software Repository
    • Team Projects

Employees access these folders according to their job roles.

 

Sharing Methods:

Windows Server provides different methods for sharing folders.

1. Basic Sharing

Basic Sharing is a simple sharing method used for quick folder sharing.

Features:

    • Easy configuration
    • Simple permission settings
    • Suitable for small environments

Basic Sharing is commonly used in small offices or simple network setups.

 

2. Advanced Sharing

Advanced Sharing provides more detailed control over shared folders.

Features:

    • Custom share names
    • Permission configuration
    • User access control
    • Simultaneous connection management

Advanced Sharing is preferred in enterprise environments because it provides better security and management.

 

3. Share Path

A Share Path is the network path used to access a shared folder.

Format:    \\ServerName\FolderName

Example:   \\FileServer\HR

This allows users to access shared folders across the network.

Benefits of shared paths:

    • Easy file access
    • Centralized resource sharing
    • Simplified collaboration

 

4. Hidden Shares ($)

Windows Server supports hidden shares using the dollar symbol ($) at the end of the share name.

Example:   \\FileServer\HR$

Hidden shares do not appear when users browse network resources, but authorized users can still access them if they know the exact path.

Benefits of hidden shares:

    • Improved privacy
    • Reduced unnecessary visibility
    • Better administrative control

Hidden shares are commonly used for administrative purposes.

 

Importance of Folder Sharing

Folder sharing helps organizations:

    • Improve teamwork
    • Centralize file access
    • Simplify data management
    • Reduce file duplication
    • Improve productivity

Without shared folders, employees would need to transfer files manually between systems.

 

Example: 

A company creates a shared folder called “Projects” on a file server. Employees from different departments access the folder through the network to collaborate on company projects while administrators control access permissions.

══════════════════════════════════════════════════

 

7.4 NTFS Permissions

NTFS permissions are security permissions used in Windows operating systems to control access to files and folders stored on NTFS-formatted drives.

NTFS permissions help administrators decide:

    • Who can access files
    • What actions users can perform
    • Which users can modify or delete data

NTFS permissions provide strong security and detailed access control for organizational data.

 

Types of NTFS Permissions:

Windows Server provides several NTFS permission types.

 

 

 

1. Full Control

Full Control provides complete access to files and folders.

Users can:

    • Read files
    • Modify data
    • Delete files
    • Change permissions
    • Take ownership

This permission is usually assigned to administrators.

 

2. Modify

Modify permission allows users to:

    • Read files
    • Write data
    • Edit files
    • Delete files

However, users cannot change permissions or ownership.

 

3. Read & Execute

This permission allows users to:

    • Open files
    • Read content
    • Run executable programs

Users cannot modify or delete files.

 

4. List Folder Contents

Allows users to:

    • View folder contents
    • Navigate folders

This permission mainly applies to folders.

 

5. Read

Read permission allows users to:

    • Open files
    • View content
    • Read attributes

No modifications are allowed.

 

6. Write

Write permission allows users to:

    • Create files
    • Add data
    • Save changes

But users may not have permission to delete files.

 

Inheritance Concept

Inheritance means permissions assigned to a parent folder automatically apply to its child folders and files.

Benefits of inheritance:

    • Simplifies permission management
    • Reduces administrative effort
    • Maintains consistent security settings

Example: If the “HR” folder has Read permission for employees, all subfolders inside HR may automatically inherit the same permission.

Administrators can also disable inheritance if special permissions are needed.

 

Permission Assignment (User vs Group) 

Permissions can be assigned directly to individual users or to groups.

 

1. User-Based Permission

Permissions are assigned directly to specific users.

Disadvantages:

    • Difficult to manage in large environments
    • Increases administrative workload

 

2. Group-Based Permission

Permissions are assigned to security groups.

Advantages:

    • Easier management
    • Better scalability
    • Simplified administration

Most organizations prefer assigning permissions through groups rather than individual users.

 

Importance of NTFS Permissions

NTFS permissions help organizations:

    • Protect sensitive data
    • Prevent unauthorized access
    • Control user activities
    • Improve security management

Improper permissions may lead to:

    • Data leaks
    • Unauthorized modifications
    • Security risks

 

Example:

A Finance folder on a file server gives Modify permission only to Finance department employees while other users receive Read-only access. This protects sensitive financial information from unauthorized changes.

---------------------------------------------------------------------

7.5 Share Permissions

Share permissions are permissions applied to shared folders when users access them through the network. These permissions control what users can do with files and folders over shared network access.

Share permissions work together with NTFS permissions to provide overall security for shared resources.

When users access a folder locally, only NTFS permissions apply. When users access the folder through the network, both Share and NTFS permissions are combined.

 

---------------------------------------------------------------------

Types of Share Permissions:

Windows Server provides three main share permissions.

 

1. Full Control

Full Control gives complete access to the shared folder.

Users can:

    • Read files
    • Modify data
    • Create files
    • Delete files
    • Change permissions

This permission is usually assigned to administrators or authorized management users.

 

2. Change

Change permission allows users to:

    • Read files
    • Create files
    • Modify data
    • Delete files

However, users cannot change permissions or ownership settings.

This permission is commonly used for department users who need to edit shared documents.

 

3. Read

Read permission allows users to:

    • View files
    • Open documents
    • Read folder contents

Users cannot modify or delete files.

This permission is suitable for users who only need viewing access. 

---------------------------------------------------------------------

Difference Between Share and NTFS Permissions:

Although both permissions control access, they work differently.

 

 

1. Share Permissions

    • Apply only through network access
    • Simpler permission structure
    • Used for shared folder access

 

2. NTFS Permissions

    • Apply locally and over network
    • More advanced and detailed
    • Provide stronger security control

 

3. Important Concept

When both Share and NTFS permissions are applied, the most restrictive permission becomes effective.

Example:

    • Share Permission = Full Control
    • NTFS Permission = Read

Final effective permission = Read

Because NTFS permission is more restrictive.

---------------------------------------------------------------------

Effective Permissions (Combination Concept)

Effective permission is the final permission a user receives after combining:

    • Share permissions
    • NTFS permissions
    • Group memberships

Windows Server calculates the combined result automatically.

Administrators must carefully configure permissions to avoid unintended access issues.

 

Best Practices for Share Permissions

Organizations usually follow these practices:

    • Assign Share permission broadly
    • Use NTFS permissions for detailed security
    • Use groups instead of individual users
    • Apply least privilege principle
    • Avoid giving Full Control unnecessarily

These practices improve security and simplify administration.

 

Importance of Share Permissions

Share permissions help organizations:

    • Control network file access
    • Protect shared resources
    • Manage user activities
    • Improve collaboration securely

Improper share permissions may lead to:

    • Unauthorized access
    • Data modification
    • Security breaches

 

Example:

A company shares a “Projects” folder across the network. Employees receive Change permission to update project files, while external consultants receive only Read permission to view documents without making changes.

══════════════════════════════════════════════════

7.6 Access Control & Security

Access control is the process of managing who can access files, folders, and network resources within an organization.

Windows Server uses access control mechanisms to protect sensitive data and ensure users only access resources required for their job responsibilities.

Proper access control improves security, reduces risks, and helps organizations maintain compliance with security policies.

 

Principle of Least Privilege

The Principle of Least Privilege means users should receive only the minimum permissions necessary to perform their work.

Users should not receive unnecessary administrative or high-level permissions.

Benefits:

    • Reduces security risks
    • Prevents accidental changes
    • Limits malware impact
    • Improves system security

Example: An employee who only views reports should receive Read permission instead of Full Control.

 

Role-Based Access Control (RBAC)

Role-Based Access Control (RBAC) is a security method where permissions are assigned based on job roles instead of assigning permissions individually.

 


 

Examples of roles:

    • HR Staff
    • Finance Team
    • IT Administrators
    • Managers

Advantages of RBAC:

    • Easier administration
    • Better scalability
    • Consistent permissions
    • Reduced management effort

RBAC is widely used in enterprise environments because it simplifies permission management.

 

Security Groups Usage

Security groups are used to organize users and assign permissions collectively.

Instead of assigning permissions to every user separately, administrators assign permissions to groups.

 

 

Example:

    • HR Group
    • Finance Group
    • IT Support Group

Benefits of security groups:

    • Simplified management
    • Easier permission updates
    • Better organization
    • Reduced administrative workload

When a new employee joins a department, administrators simply add the user to the appropriate group.

 

Best Practices for Permission Management

Organizations follow several best practices to improve security and administration.

Common Best Practices

    • Use groups instead of individual permissions
    • Apply least privilege principle
    • Regularly review permissions
    • Remove unused accounts
    • Avoid unnecessary Full Control permissions
    • Separate administrative accounts
    • Monitor sensitive folder access

These practices help maintain secure and organized environments.

 

Importance of Access Control

Access control helps organizations:

    • Protect sensitive data
    • Prevent unauthorized access
    • Maintain compliance
    • Improve security management

Without proper access control, organizations may face:

    • Data breaches
    • Unauthorized modifications
    • Security vulnerabilities

 

Example:

A company uses RBAC to assign permissions based on department roles. HR employees can access employee records, while Finance users can access financial reports. IT administrators manage permissions centrally using security groups.

---------------------------------------------------------------------

7.7 File Server Management

File Server Management involves managing shared storage resources, monitoring file access, controlling storage usage, and maintaining file server performance and security.

Proper file server management helps organizations maintain organized storage, improve accessibility, and protect important business data.

Administrators use different management techniques to ensure users can securely access shared resources without affecting server performance.

 

Mapping Network Drives

Mapping a network drive means connecting a shared folder from a file server to a drive letter on a user’s computer.

This allows users to access shared folders easily as if they were local drives.

Benefits of mapping network drives:

    • Easy access to shared resources
    • Faster file navigation
    • Simplified user experience
    • Improved productivity

Example: A shared folder on the file server may appear as:

    • Drive H: for HR department
    • Drive F: for Finance department

Mapped drives are commonly used in enterprise environments to provide organized access to departmental resources.

 

File Access Auditing

File access auditing is used to monitor and track user activities on files and folders.

Administrators can monitor:

    • File access
    • File deletion
    • Permission changes
    • Failed access attempts

Benefits of auditing:

    • Improves security monitoring
    • Detects unauthorized access
    • Helps during investigations
    • Supports compliance requirements

Auditing information is commonly stored in security logs for review.

 

Disk Quota Management

Disk quota management allows administrators to limit the amount of storage space users can use on a server.

Benefits of disk quotas:

    • Prevents excessive storage usage
    • Improves storage management
    • Reduces storage abuse
    • Maintains server performance

Example: A company may assign:

    • 5 GB quota for normal employees
    • 20 GB quota for department managers

This helps ensure fair and organized storage usage.

 

Backup Basics

Backups are important for protecting file server data from accidental deletion, hardware failure, ransomware, or data corruption.

Basic backup concepts include:

    • Creating copies of important files
    • Storing backup data securely
    • Restoring lost files when needed

Benefits of backups:

    • Data protection
    • Disaster recovery
    • Business continuity
    • Reduced downtime

Organizations usually perform regular backups of file servers to ensure data safety.

 

Importance of File Server Management

Proper file server management helps organizations:

    • Organize storage resources
    • Improve file accessibility
    • Protect business data
    • Monitor user activities
    • Maintain server performance

Poor management may lead to:

    • Storage problems
    • Data loss
    • Unauthorized access
    • Performance issues

Example:

A company maps department shared folders as network drives for employees. Administrators monitor file access through auditing, apply storage quotas to users, and perform regular backups to protect organizational data.

══════════════════════════════════════════════════

 

7.8 Troubleshooting File Access Issues

File access problems are common in enterprise environments and can prevent users from accessing shared folders or files on the network.

Troubleshooting helps administrators identify the cause of access problems and restore proper connectivity and permissions.

Common causes of file access issues include:

    • Incorrect permissions
    • Network connectivity problems
    • Authentication failures
    • Incorrect share configuration
    • DNS or server issues

Proper troubleshooting reduces downtime and improves user productivity.

 

Access Denied Errors

“Access Denied” is one of the most common file-sharing errors.

This error occurs when a user does not have sufficient permissions to access a file or folder.

Possible causes:

    • Incorrect NTFS permissions
    • Incorrect Share permissions
    • Group membership issues
    • Inheritance problems

Administrators should verify both Share and NTFS permissions while troubleshooting.

 

Checking Effective Permissions

Effective permissions represent the final permissions a user receives after combining:

    • NTFS permissions
    • Share permissions
    • Group memberships

Sometimes users may belong to multiple groups, which affects their final access level.

Checking effective permissions helps administrators determine why access is allowed or denied.

Benefits:

    • Identifies permission conflicts
    • Simplifies troubleshooting
    • Improves security management

 

Network Path Issues

Users may fail to access shared folders due to network path problems.

Common causes include:

    • Incorrect server name
    • DNS resolution problems
    • Network connectivity failure
    • Server unavailable
    • Incorrect share path

Example of share path:   \\ServerName\SharedFolder

If the server cannot be reached, users will not access the shared resources.

 

Troubleshooting Tools:

Windows Server provides several tools for diagnosing file access issues.

net use

The net use command is used to:

    • View mapped drives
    • Connect network shares
    • Disconnect shared resources

It helps verify network share connections.

 

 

whoami

The whoami command displays the currently logged-in user and group memberships.

This helps administrators verify:

    • User identity
    • Security group membership
    • Permission assignments

 

 

Event Viewer

Event Viewer stores logs related to:

    • File access failures
    • Authentication issues
    • Permission problems
    • Security events

Administrators use Event Viewer to analyze errors and investigate issues.

 

 

Importance of Troubleshooting

Effective troubleshooting helps organizations:

    • Reduce downtime
    • Restore user access quickly
    • Improve productivity
    • Maintain security
    • Detect permission issues

Without troubleshooting, users may lose access to important business resources.

 

Example:

 An employee cannot access the Finance shared folder and receives an “Access Denied” message. The administrator checks effective permissions and discovers the user is not part of the Finance security group. After adding the user to the correct group, access works properly.