You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the File
Server Resource Manager role service installed.
Each time a user receives an access-denied message after attempting to access a folder on
Server1, an email notification is sent to a distribution list named DL1.
You create a folder named Folder1 on Server1, and then you configure custom NTFS
permissions for Folder1.
You need to ensure that when a user receives an access-denied message while attempting
to access Folder1, an email notification is sent to a distribution list named DL2. The solution
must not prevent DL1 from receiving notifications about other access-denied messages.
What should you do?
A.
From Server Manager, run the New Share Wizard to create a share for Folder1 by
selecting the SMB Share – Advanced option.
B.
From the File Server Resource Manager console, modify the Access-Denied Assistance
settings.
C.
From the File Server Resource Manager console, modify the Email Notifications settings.
D.
From Server Manager, run the New Share Wizard to create a share for Folder1 by
selecting the SMB Share -Applications option.
Explanation:
http://technet.microsoft.com/en-us/library/jj574182.aspx#BKMK_12
When using the email model each of the file shares, you can determine whether access
requests to each file share will be received by the administrator, a distribution list that
represents the file share owners, or both.
The owner distribution list is configured by using the SMB Share – Advanced file share
profile in the New Share Wizard in Server Manager.
wrong answer to a wrong question… this are not the options to the question
I think it’s correct – A –
http://technet.microsoft.com/en-us/library/jj574182.aspx#BKMK_1_5
actually it’s C
http://technet.microsoft.com/en-us/library/hh831402.aspx#BKMK_2
But pay attention on the part of the question that says: “The solution must not prevent DL1 from receiving notifications about other access-denied messages.”
So you have to configure a specific rule for Folder1 to send an email to DL2 without messing up with the configuration for DL1 which is already at File Server Resource Manager.
I still think it’s A.
http://technet.microsoft.com/en-us/library/jj574182.aspx#BKMK_12
Answer is B.
Just found this: http://www.passtutor.com/media/demo/70-411-demo.pdf
To specify a separate access-denied message for a shared folder by using File Server Resource
Manager
See step 4 below.
1. Open File Server Resource Manager. In Server Manager, click Tools, and then click File Server
Resource Manager.
2. Expand File Server Resource Manager (Local), and then click Classification Management.
3. Right-click Classification Properties, and then click Set Folder Management Properties.
4. In the Property box, click Access-Denied Assistance Message, and then click Add.
5. Click Browse, and then choose the folder that should have the custom access-denied
message.
6. In the Value box, type the message that should be presented to the users when they cannot
access a resource within that folder.
You can add macros to the message that will insert customized text. The macros include:
o [Original File Path] The original file path that was accessed by the user.
o [Original File Path Folder] The parent folder of the original file path that was accessed by the
user.
o [Admin Email] The administrator email recipient list.
o [Data Owner Email] The data owner email recipient list.
7. Click OK, and then click Close.
i thought about this as well, but this actually tells you this is not the option you need.
This creates a popup that is shown to an user who gets an access denied. In that message you can specify the “data owner email”, but that doesn’t send an email. it just gives the user the option to click on the email address and contact the owner (see q32 for the popup).
Answer is A.
When using the email model each of the file shares, you can determine whether access requests to each file share will be received by the administrator, a distribution list that represents the file share owners, or both.
The owner distribution list is configured by using the SMB Share – Advanced file share profile in the New Share Wizard in Server Manager.
You can also use the File Server Resource Manager console to configure the owner distribution list by editing the management properties of the classification properties.
”
Source: http://technet.microsoft.com/en-us/library/jj574182.aspx
It should not be C because it does global changes and this will impact mails sent to DL1.
“
Confirmed in a lab environment: answer is A
The question states not messing up the notifications to DL1. When creating a second share for a folder, you can define one or more Folder Owner Email addresses on the Management Properties tab when creating the Advanced SMB share.
B: sets global settings regarding , therefore not useable in this situation
C: related to global e-mail settings only (SMTP server, sender address)
D: no option to add Folder Owner Email addresses anywhere
B: sets global settings regarding e-mail
excellent analysis ed. definitely correct
Hi Guys,
definetly is answer A. Because, when you create new Share and you choose Advanced Options, on tab Management Properties you can specify Folder owner email.
there is my screen from WS2012R2 – http://i.imgur.com/OSQjC9q.png
Thanks again Tomas great use of paint!
In Angus you don’t have option : Advanced share..
FSRM > Set folder managment property.
it should be C
For sure its A! Watch Ed’s answer!
adding DL2 to the global email setting does not modify anything for DL1, also what I just verified in lab: using the Folder Owner Email property does not send automatically. The users will get a button they may use for this, but it’s not mandatory.
It’s explained here:
https://4sysops.com/archives/file-server-resource-manager-fsrm-part-6-classification-management
“Setting this property allows you to present the user with the owner’s email address so that they can seek access approval before contacting IT”
so, I’d prefer C, even though DL2 will receive more than requested, but it’s not stated that this should not be, and it does not modify anything for DL1
but still unsure because there is another same question without this answer provided
It is C…
When using the email model each of the file shares, you can determine whether access requests to each file share will be received by the administrator, a distribution list that represents the file share owners, or both.
The owner distribution list is configured by using the SMB Share ?Advanced file share profile in the New Share Wizard in Server Manager.
http://technet.microsoft.com/en-us/library/jj574182.aspx#BKMK_12