Implementing Security

---

When talking about security as it relates to file systems, it is necessary to define what is meant by security. The NTFS file system gives you the ability to implement “local security.” Local security is defined as being able to restrict access to a file or directory to someone who is sitting at the keyboard of that particular machine. Even if someone can log on to your Windows NT workstation locally or interactively, for example, you can still prevent them from accessing your files and directories if you use NTFS security.

NTFS is the only file system used with Windows NT 4 that has the ability to provide local security. The FAT file system can only secure a directory with share level permissions, not local permissions. Share level permissions apply only to users accessing the directory across the network. Because of this, share level permissions cannot prevent David, logged on locally, from accessing your files or directories.