MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

You can deny permission to a user account or group. To deny all access to a user
account or group for a folder, deny the Full Control permission.
Standard NTFS File Permissions
You assign file permissions to control the access that users have to files. Table 8-2 lists
the standard NTFS file permissions that you can assign and the type of access that each
provides.
Table 8-2 NTFS File Permissions
This NTFS File
Permission Allows the User to
Lesson 1 Introduction to NTFS Permissions
Read Read the file and view file attributes, ownership, and permissions
Write Overwrite the file, change file attributes, and view file ownership and
permissions
Read & Execute Run applications, plus perform the actions permitted by the Read
permission
Modify Modify and delete the file, plus perform the actions permitted by the Write
permission and the Read & Execute permission
Full Control Change permissions and take ownership, plus perform the actions
permitted by all other NTFS file permissions
How Windows XP Professional Uses Access Control Lists
NTFS stores an access control list (ACL) with every file and folder on an NTFS volume.
The ACL contains a list of all user accounts and groups that have been assigned
permissions for the file or folder, as well as the permissions that they have been
assigned. When a user attempts to gain access to a resource, the ACL must contain an
entry, called an access control entry (ACE), for the user account or a group to which
the user belongs. The entry must allow the type of access that is requested (for example,
Read access) for the user to gain access. If no ACE exists in the ACL, the user cannot
access the resource.
How Effective Permissions Are Calculated When Multiple Sets of NTFS
Permissions Are in Effect
It is possible for multiple sets of NTFS permissions to apply to a user for a particular
resource. For example, a user might be a member of two different groups, each of
which is assigned different permissions to access a resource. To assign permissions
effectively, you must understand the rules and priorities by which NTFS assigns and
combines multiple permissions and NTFS permissions inheritance.
8-3