You work as a network administrator at ABC.com. The ABC.com network consists of a single
domain named ABC.com. All servers on the ABC.com network have Windows Server 2012 R2
installed.
The ABC.com network contains a network attached printer named HPNet01. Only members of a
group named ABCUsers and members of the Administrators group will be allowed to use
HPNet01. You publish the HPNet01 in Active Directory and share it from a domain controller
named ABC_DC02. You then assign the deny Print permissions to HPNet01 for the Everyone
group.
What else should you do to meet the requirements for HPNet01?
A.
You should disable Branch Office Direct Printing
B.
You should grant the Print permission to the ABCUsers group.
C.
You should configure the Printer defaults.
D.
You should grant the Print permission to the Administrators group.
E.
You should grant the Print permission to the ABCUsers group and the Administrators group.
Explanation:
The Server Operators group, the Administrators group, and the Print Operators
group are all built-in and already have permissions to send print jobs.
By “deny Print permissions to HPNet01 for the Everyone group” nothing can work, becource all are members of everyone and DENY takes precedence
Have you even tried this on a server ?
When multiple permissions are assigned to a group of users, the least restrictive permissions apply. However, when Deny is applied, it takes precedence over any permission.
Question is wrong!!
http://www.ntfs.com/ntfs-permissions-precedence.htm
The correct answer is not listed.
F: Remove the everyone permission then add ABCUsers and Administrators to the printer security.
Agree. Deny takes precedence. Poorly worded question. I like Dave’s choice of F as an answer.
I think the answer is correct…..
CORRECT ANSWER = B
Why?
1. The deny Print permissions to HPNet01 has been implemented to Everyone
2. Administrators group already have privilege to print since they are admins – No change necessary
3. Grant print permissions to ABCUsers group so they can print
Simple as that!
You’re half right. The question and answer are worded very poorly.
Deny always takes precedence. Since EVERYONE is denied from printing, this means ABCUsers and even Administrators won’t be able to print. Correct answer should be:
Remove the everyone permission then add ABCUsers to the printer security.
You don’t need to add administrators to the group because it’s there by default.