You have a computer that runs Windows 7. The computer is a member of a domain.
You share D:\data as Data. You assign Everyone Full control share permissions to the folder. No
other share permissions are assigned to the folder.
From another computer, you attempt to create a file in the Data share by using a domain account
named User1. You receive the following error message: “Destination Folder Access Denied”.
You need to ensure that you can create files in the Data share by using the User1 account.
What should you do?
A.
Create a local user named User1.
B.
Add User1 to the local Power Users group.
C.
Assign User1 Write NTFS permission on the D:\data folder.
D.
Assign User1 Full control share permissions to the Data share.
Explanation:
Share permissions apply to users who connect to a shared folder over the network. Share
permissions do not affect users who log on locally, or log on using Remote Desktop. To set
permissions for users who log on locally or using Remote Desktop, use the options on the Security
tab instead of the Share Permissions tab. This sets permissions at the NTFS file system level. If both
share permissions and file system permissions are set for a shared folder, the more restrictive
permissions apply when connecting to the shared folder. For example, to give Read access on a
shared folder to users in your domain, on the Share Permissions tab, set permissions for the
Everyone group to Full Control. On the Security tab, specify more restrictive access by setting the
permissions for the Domain Users group to Read access. The result is that a user who is a member of
the Domain Users group has read-only access to the shared folder whether the user is connected
through a network share, through Remote Desktop, or is logged on locally.
Permissions
The Read permission allows a user or group to access a file or folder but does not allow modification
or deletion. The Change permission includes the read permission but also allows you to add files,
delete files, and modify files in the shared folder. This permission is equivalent to the Read/Write
permission in the basic File Sharing dialog box. The Full Control permission includes all the rights
conferred by the Change and Read permissions. It also allows the user assigned that permission to
modify the permissions of other users. Full Control is equivalent to the basic sharing Owner
permission, though unlike basic sharing, where there can only be one user assigned the Owner
permission, you can assign the Full Control permission to users and groups.
NTFS permissions
You can configure the local NTFS permissions for a shared folder or volume using Share and Storage
Management in the following ways: New shared resources. In the Provision a Shared Folder Wizard,
before you select a network sharing protocol, you can change the NTFS permissions for the folder or
volume you will be sharing. These NTFS permissions will apply both locally and when accessing the
resource over the network. To change the NTFS permissions, on the NTFS Permissions page, select
Yes, change NTFS permissions, and then click Edit Permissions. Existing shared resources. You can
change the NTFS permissions of a shared folder or volume listed on the Shares tab. To change the
NTFS permissions, select the folder or volume, in the Actions pane click Properties, and on the
Permissions tab, click NTFS Permissions.