Technical data

JSC 36381 MARCH 30, 2000
Baseline
4-6
NTFS Permission ( ) Meaning
No Access (none) Absolutely no access to the file. Overrides any other NTFS directory and file
permissions assigned through other group memberships.
Read (RX) The contents of the file may be viewed. Program file may be executed.
Change (RWXD) Data files may be edited and deleted.
Full Control (all) In addition to capabilities granted in the Change permission, the permissions
for that file may be changed and ownership taken.
Special File (RWXDPO) NTFS permissions may be set as desired to any combination (see table notes).
Notes:
• Permissions for file
Coded permissions: R=Read, W=Write, X=Execute, D=Delete, P=Change Permissions, O=Take
Ownership
Table 4-5
NTFS FILE-LEVEL PERMISSIONS
4.8 File Server Security
File Allocation Table (FAT) Share security and NTFS File Security are implemented to
protect certain programs and data located on the OPS LAN File Server.
4.8.1 FAT16 Partition (C: Drive)
The C: Drive partition of the OPS LAN File Server is formatted with the 16-bit FAT
file system. Windows NT’s FAT file system is a long filename (LFN)-capable
version of the one normally found in DOS. The OPS LAN Windows NT network
operating system resides on this drive of the File Server. Users who are permitted to
log in at the File Server laptop can directly access the FAT16 drive. Across the
network, the File Server’s C: Drive may be accessed by administrators and the OCA
account only. The OCA account allows the ground controllers the capability of
transferring, repairing or upgrading files located on the C: Drive.
4.8.2 NTFS Partition (D: Drive)
The D: Drive partition of the OPS LAN File Server is formatted with the NT File
System (NTFS). NTFS is a reliable, secure, and tuned file system capable of
supporting volumes up to 16 exabytes. It supports fault-tolerant features such as
transaction-based recovery and hot-fixing bad disk sectors. NTFS security controls
data access at the folder and file level (see Tables 4-1 and 4-2). For these reasons,
users’ home directories and OPS LAN network data are stored to and backed up
from the D: Drive partition.
All users have Change permission on the File Server’s D: Drive, which is accessed
by network clients through the automatically assigned K: Drive letter mapping. The