You have a Windows 10 Enterprise computer.
The computer has a shared folder named C:\\Marketing. The shared folder is on an NTFS volume.
The current NTFS and share permissions are configured as follows.
UserA is a member of both the Everyone group and the Marketing group. UserA must access C:\\Marketing
from across the network. You need to identify the effective permissions of UserA to the C:\\Marketing folder.
What permission should you identify?
A.
Full Control
B.
Read and Execute
C.
Read
D.
Modify
Explanation:
UserA is a member of both the Everyone group and the Marketing group and UserA must access C:\\Marketing
from across the network.
When accessing a file locally, you combine the NTFS permissions granted to your account either directly or by
way of group membership. The ‘least’ restrictive permission is then the permission that applies.
In this question, the NTFS permission is the least restrictive of Read/Execute and Modify… so Modify is the
effective permission.
When accessing a folder or file across the network, you combine the effective NTFS permissions (Modify in this
case) with the effective Share permissions granted to your account either directly or by way of group
membership (Full Control in this case). The ‘most’ restrictive permission is then the permission that applies.
Modify is more restrictive than Full Control so Modify is the effective permission.
Incorrect Answers:
A: The effective permission is Modify, not Full Control.
B: The effective permission is Modify, not Read and Execute.
C: The effective permission is Modify, not Read.