Effective permission

k31453

If user account is member of these three group what will be effective permission would be?


My guess is :
For shared -- Full control, change, read
For NTFS -- Deny write, Allow modify, allow read & execute, allow list folders of contents ?? Anything else?

Am i correct ?

bohack

K,

Always take the most permissive permissions from the NTFS and most permissive permissions from the share permissions. Then the most restrictive from both.

So you have Modify from the NTFS and Full from the Share, the most restrictive would be Modify. The only difference is since the share level is Full control if at the NTFS you were the owner of the file you would override the Modify NTFS and have Full control. I doubt that would be a test question, but it's good to know. I did do a video on this see these videos:

Third video I cover effective permissions:
https://www.youtube.com/watch?v=ZLs_0xhw8L8&list=PLqetuNmLWsdm5gicNkzHRrOEb0C-mMZGf

This is one of the labs that shows you how permissions work:
https://youtu.be/4fkO7CoWGFA

Bohack

k31453

Thank you