Question on Practice Test

shamrocker98

8. You share a folder on your computer and you assigned the share permission Change to Everyone. John, a user from the Sales department, has been granted Full Control NTFS permission to the folder. John is also a member of the Sales group, which has been assigned Read NTFS permissions.
What are John's effective permissions when connecting to the shared folder?

a. Read
b. Read & Execute
c. Change
d. Full Control

Answer(s): c. Change
Your Answer(s): a. Read

Explanation:
The effective NTFS permissions are the sum of the permissions assigned to user and to groups the user belongs to. (except for explicit deny permissions which overrides any other conflicting permissions assigned.) When you combine NTFS and Share permissions the most restrictive applies.


My question is, since the most restrictive permission applies, why isn't the answer a. Read? John's group was given the Read permission and that is more restrictive, right? Thanks for your input!

Webmaster

This questions has been explained a couple of times in different posts here previously, try this one:
www.techexams.net/forums/viewtopic.php?t=11804

In short: you need to determine the effective NTFS permissions and the effective Share permissions before combining them, and not throw them all on one pile. I.o.w. John's effective NTFS permission is Full Control (not Read), combine that with the Share permissions Change and the least restrictive of these two is Change.

I hope this helps. If not, try the link above and if that doesn't help feel free to ask again.

shamrocker98

Yes, that does help. Thank you very much for the response!