Scribd
Upload
13 views2 pages

Module 2

Module 2 focuses on User and File System Management in Windows OS, teaching students about user account types, management functions, and the importance of security practices. It also covers file system concepts, including different file systems like NTFS and FAT32, file structure, permissions, and tools for managing files. Key takeaways emphasize the need for strong password policies and the use of standard user accounts for daily activities to minimize security risks.

Uploaded by

tongquin
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
13 views2 pages

Module 2

Module 2 focuses on User and File System Management in Windows OS, teaching students about user account types, management functions, and the importance of security practices. It also covers file system concepts, including different file systems like NTFS and FAT32, file structure, permissions, and tools for managing files. Key takeaways emphasize the need for strong password policies and the use of standard user accounts for daily activities to minimize security risks.

Uploaded by

tongquin
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd

Module 2: User and File System Management

🎯 Objective: Equip students with the knowledge and practical skills to manage user accounts and file
systems in Windows OS.

🔹 Lesson 1: User Account Management

1.1 What is a User Account?

A user account is a collection of settings and information that defines how a user interacts with a
computer or network. It includes username, password, privileges, and profile settings.

1.2 Types of User Accounts in Windows:

 Administrator – Full control over the system, can install programs and modify settings.

 Standard User – Limited access; cannot install software or change system settings.

 Guest – Temporary access; limited privileges and usually disabled by default.

 Domain Users (if networked with Active Directory) – Managed via a server environment.

1.3 Key Functions of User Management:

 Creating users via Control Panel or Computer Management > Local Users and Groups

 Setting strong passwords and policies

 Managing groups to apply collective permissions (e.g., Administrators, Users)

 Configuring User Account Control (UAC) to manage when to notify users of system changes

1.4 User Profile and Directory:

Each user has a folder under C:\Users\Username containing:

 Documents, Desktop, Downloads

 AppData (hidden folder for application configurations)

📝 Important Notes:

 Never use Administrator accounts for daily activities; use Standard accounts to minimize security
risks.

 Default accounts like Administrator and Guest should be renamed or disabled if unused.

 Password policies (complexity, expiration, lockout) should be enforced in enterprise settings.

🔹 Lesson 2: File System Concepts in Windows

2.1 File Systems Overview:


A file system defines how data is stored, retrieved, and managed on a disk.
Windows supports:

 NTFS (New Technology File System) – Modern, secure, supports file permissions, encryption,
compression.

 FAT32 (File Allocation Table) – Legacy, less secure, no permission support, max file size 4GB.

 exFAT – Used for flash drives with large files but without NTFS permissions.

2.2 File and Folder Structure in Windows:

 C:\Windows – Core system files

 C:\Program Files – Default folder for installed applications

 C:\Users – Contains user profiles and personal data

 Hidden/System Files – Windows hides important files to prevent accidental changes (e.g.,
[Link], [Link])

2.3 Permissions and Access Control:

Permissions determine who can read, write, modify, or delete files/folders.

 NTFS Permissions (applied via Properties > Security Tab):

 Full Control
 Modify
 Read & Execute
 List Folder Contents
 Read
 Write
 Use Access Control Lists (ACLs) to fine-tune permissions for individual users or groups.

2.4 File Attributes and Ownership:

 Attributes: Read-only, Hidden, System

 Ownership: Files have owners by default (usually the creator). Admins can take ownership when
needed.

2.5 File System Tools and Utilities:

 icacls – Command-line tool to manage permissions

 Disk Cleanup – Removes unnecessary system files

 Check Disk (chkdsk) – Detects and fixes disk errors

 File Explorer – GUI for browsing and managing files

Common questions

Powered by AI

Windows OS implements user profile management by creating a folder under C:\Users\Username for each user, containing personal data like Documents, Desktop, and Downloads, as well as a hidden AppData folder for application configurations . This system allows personalized settings and data access across sessions, facilitating user-specific environment loading. For system administration, proper management of these profiles, such as cleaning up unused profiles and ensuring secure access to sensitive data in AppData, is crucial to maintain efficiency and security . Administrators must ensure profiles are correctly set up and secured against unauthorized access, especially in environments with shared or public computers.

Enterprises should enforce password policies that include requirements for complexity, expiration, and lockout thresholds to enhance security. Complex passwords that include a mix of letters, numbers, and symbols make it difficult for unauthorized users to guess or crack passwords . Expiration policies ensure that passwords are updated regularly, reducing the risk of breaches from compromised credentials. Lockout policies temporarily disable accounts after several failed login attempts, deterring brute-force attacks . These strategies align with user management in Windows by integrating with user account settings to enforce secure access control, ensuring that all user accounts comply with enterprise security standards.

Using Standard user accounts for daily activities is recommended to minimize security risks associated with Administrator accounts, which have full system access . Administrator accounts can install software and modify system settings, which increases the risk of accidental or malicious changes that can impact system stability and security . Standard accounts, on the other hand, have restricted permissions, reducing the likelihood of implementing harmful changes and protecting the system from potential threats. This practice helps maintain system integrity and prevents unauthorized actions by users or malware.

File and folder permissions in Windows OS determine who can read, write, modify, or delete them, crucial for data security and integrity . Permissions like Full Control, Modify, and Read & Execute are managed through the Properties > Security Tab in NTFS file systems . Access Control Lists (ACLs) enhance this system by allowing fine-tuning of permissions for individual users or groups, providing granular control over access rights . By specifying exact permissions for each user or group, ACLs offer robust security configurations, ensuring that only authorized users can perform certain actions on files and folders, thus protecting sensitive data.

Administrators should take ownership of files in scenarios where access needs to be restored or permissions need to be modified when the current owner is unavailable or unresponsive . This often occurs in managed environments where user permissions can be inadvertently altered, or when managing file access in user accounts that are no longer active. Tools that facilitate this process include the command-line tool 'icacls,' which administrators can use to change file and folder permissions and take ownership to resolve access issues . This capability is essential for maintaining data accessibility and administrative control.

The 'Check Disk' utility, or chkdsk, in Windows OS is used to detect and fix disk errors, which are crucial for maintaining the integrity and performance of the file system . It checks the file system for logical and physical errors, repairs issues like file system corruption, and recovers readable data from bad sectors . Regular use of Check Disk helps prevent data loss and ensures that files and directories are correctly arrayed on the disk, thus optimizing system performance and reliability.

Hidden and system files in Windows OS, such as pagefile.sys and hiberfil.sys, are essential for the operating system's stability and performance. These files often manage system operations like virtual memory and hibernation states, which are critical for efficient system functioning . Protecting these files from user modification is vital because inadvertent changes can lead to system instability, data loss, or reduced performance. Windows hides these files by default to prevent accidental changes, ensuring that essential system processes remain uninterrupted and that users do not tamper with critical system components that could compromise the OS.

Different types of user accounts in Windows OS provide varying levels of access, influencing system security. For instance, Administrator accounts have full control, including installing programs and changing settings, posing a significant security risk if misused. Therefore, they should not be used for daily activities . Standard User accounts have limited privileges, reducing the risk of unintentional system changes. Guest accounts offer temporary, highly restricted access and are generally disabled by default . Best practices include renaming or disabling default accounts like Administrator and Guest if they're unused, enforcing password complexity and expiration policies, and utilizing Standard accounts for non-administrative tasks to minimize security risks .

NTFS (New Technology File System) is modern and secure, supporting file permissions, encryption, and compression, making it ideal for use on internal drives where security and large file handling are critical . FAT32 is a legacy file system with no permission support and a maximum file size of 4GB, suitable for older devices or systems but not recommended for sensitive data due to its lack of security features . exFAT is designed for flash drives without NTFS permissions, allowing large files but lacking the security features of NTFS, making it suitable for portable storage devices . These differences impact the choice of file systems based on needs such as security, compatibility, and file size.

User Account Control (UAC) enhances system security by limiting the applications and tasks that users can execute based on rights elevation. It prompts users for administrative credentials or confirmation when a task requires elevated privileges, reducing the risk of unauthorized changes . However, UAC's effectiveness is limited by user awareness and behavior, as users may become conditioned to simply approve all prompts, potentially allowing malicious applications to gain elevated access. Also, persistent threats that exploit vulnerabilities before UAC responds can bypass its protections. Therefore, while UAC is a critical layer of security, it must be used alongside other security measures.

You might also like