specific permissions question

This was acctually on the 290. You want to assign permissions to a folder to allow users to write to a folder, but not read be able to read anything. Very stange situation. What would the permissions on somthing like that look like.

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

mobri09

I am kind of rusty on permissions, but i would say you would have to adjust the settings under the Advanced persmissions tab which are far more granular permissions.

fualker

I was thinking that too but it only listed the basic NTFS permission under the security tab.

rphann

Correct me if I'm wrong, but don't you need NTFS/Share read permission enabled to have access to shared folder. If you have just write permission, you wouldn't be able to access the folder in the first place. So how could you write.

If it is possible, it might be under special permissions.

It would be helpful if you put down the exact question that was on the exam; that might clearify the question.

johnnynodough

Write/Append and list folder contents data is all you would need, perhaps folder traversal if the folder is under a structure that doesnt have permissions. If you deselt all and just select write it will turn on list folder contents for you.

mikey_b

fualker wrote:

This was acctually on the 290. You want to assign permissions to a folder to allow users to write to a folder, but not read be able to read anything. Very stange situation. What would the permissions on somthing like that look like.

Set up your Users group to have the following permissions to the folder:

Allow Write
Deny Read

nouveaux21

Actually, I think you would be okay if you set up the permissions like so...
(by the way I'm just going to assume the Sales group should only have write permissions)

SHARE:
Everyone - Full Control

NTFS:
SalesUsers - List Folder Contents, Write

Leave all other selections unchecked and then the restrictive combination of NTFS and Share permissions should take care of the rest. List Folder Contents will allow the users to see the files in Explorer, but the lack of an allowance to read/execute will prevent them from actually opening and viewing the file(s).

Try NOT to use deny permissions since they override everything else... Instead use what I like to call "no access" where whatever you leave unchecked is by default an implied Deny. Therefore, if I assigned the above permissions to Sales and those were the only permissions I used, then users from Marketing would not be able to access this share since they are not listed onthe ACL...

Somebody PLEASE correct me if I'm wrong cause I am taking this exam for the second time tomorrow and I do not feel ready!

Nouveaux21