MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

8-26 Chapter 8 Securing Resources with NTFS Permissions
Table 8-7 Permissions Problems and Troubleshooting Solutions
Problem Solution
A user cannot gain access to a
file or folder.
You add a user account to a
group to give that user access to a
file or folder, but the user still
cannot gain access.
A user with Full Control permission
to a folder deletes a file in
the folder, although that user
does not have permission to
delete the file itself. You want to
stop the user from being able to
delete more files.
Practice: Managing NTFS Permissions
In this practice, you will observe the effects of taking ownership of a file. Then you will
determine the effects of permission and ownership when you copy or move files.
Finally, you will determine what happens when a user with Full Control permission to
a folder has been denied all access to a file in that folder but attempts to delete the file.
Complete the following two exercises, and answer any questions that are asked. You
can find answers to these questions in the “Questions and Answers” section at the end
of this chapter.
Important To successfully complete this practice, you must have completed all exercises
in the Lesson 2 practice.
Exercise 1: Taking Ownership of a File
If the file or folder was copied or moved to another NTFS
volume, the permissions might have changed.
Check the permissions that are assigned to the user
account and to groups to which the user belongs. The user
might not have permission, or might be denied access
either individually or as a member of a group.
For access permissions to be updated to include the new
group to which you have added the user account, the user
must either log off and then log on again, or close all network
connections to the computer on which the file or
folder resides, and then make new connections.
You have to clear the special access permission, the Delete
Subfolders And Files check box, for that folder to prevent
users with Full Control of the folder from being able to
delete files in it.
In this exercise, you observe the effects of taking ownership of a file. To do this, you
must determine permissions for a file, assign the Take Ownership permission to a user
account, and then take ownership as that user.