How permissions affect software
In most cases, you??™ll want to set permissions to protect your files and folders
from unauthorized access. But some permissions are necessary to get certain
programs to work.
For example, if you??™re writing a CGI or ASP program for the IIS web server
(see Chapter 9), you??™ll need to set the permissions of your files to give the
Internet Guest Account full access. The Internet Guest Account user account
name is based on the machine name: for a system named SERVER, you??™d
enter SERVER\IUSR_SERVER into the Select Users or Groups dialog (as shown
earlier in Figure 8-6).
Vista uses this scheme as part of the UAC feature discussed in ???Control User
Account Control,??? later in this chapter, which is why software not written
especially for Vista won??™t know that it??™s not allowed to write files to your
PC??™s Program Files folder.
Of course, you can also use overly restrictive permissions to your advantage
and prevent changes to certain Registry keys, as described in ???Lock Your
File Types??? in Chapter 3.
470 | Chapter 8: Users and Security
Protect Your Files with Encryption
Encryption effectively adds another layer of protection for your especially
sensitive data, ensuring that a file can only be viewed by its creator (well,
sort of). If any other user??”even someone with administrator privileges??”
attempts to view the file, she will see only gibberish.
When a file is marked for encryption, the encryption and decryption of the
file are handled by Windows invisibly in the background when its creator
writes and views the file, respectively.
Pages:
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656