You have a file server named Server1 that runs Windows Server 2012 R2. Server1 contains a folder
named Folder1.
You share Folder1 as Share1 by using Advanced Sharing. Access-based enumeration is enabled.
Share1 contains an application named Appl.exe.
You configure the NTFS permissions on Folder1 as shown in the following table.
The members of Group2 report that they cannot make changes to the files in Share1. The members
of Group1 and Group2 run Appl.exe successfully.
You need to ensure that the members of Group2 can edit the files in Share1.
What should you do?
A.
Replace the NTFS permissions on all of the child objects.
B.
Edit the Share permissions.
C.
Edit the NTFS permissions.
D.
Disable access-based enumeration.
Explanation:
Share permissions and NTFS permissions are independent in the sense that neither changes the
other. The final access permissions on a shared folder are determined by taking into consideration
both the share permission and the NTFS permission entries. The more restrictive permissions are
then applied.
References:
Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter8: File Services and
Storage, Lesson 2: Provisioning and Managing Shared Storage, p.388
Correct answer is B.
Edit the Share permissions.
theres a huge debate about this
may be the correct answer is B
The more restrictive permissions apply. The NTFS permissions allow Group2 to make changes tot the files (Read,execute and Write). Thus, the share permissions are more restrictive and do not allow Group2 to make changes to the files. So, the share permissions should be edited. The right answer is indeed B.
But write it’s only to create the file. I think that the answer it’s correct because you need of of modify permission
Correct answer is B.
Edit the Share permissions.
http://www.aiotestking.com/microsoft/you-need-to-ensure-that-the-members-of-group2-can-edit-the-files-in-share1/
C. is correct. You need to grant Group2 the ‘Modify’ permission.
Modify lets you change permissions.
Modify does not permit you to change permissions. Here, the NTFS permission look okay. But what if the share permissions are only read and execute? That means that all groups will only do read and execute. The smart move is to make the share permissions modify or change then the NTFS permission will further restrict what the individual users can do. I vote B.
Tested in lab. B is correct.