MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

8-36 Chapter 8 Securing Resources with NTFS Permissions
Exam Highlights
Key Points
Key Terms
Before taking the exam, review the key points and terms that are presented in this
chapter. You need to know this information.
■ To calculate effective NTFS permissions, first combine all allow permissions from
all sources. Next, determine any deny permissions the user has. Deny permissions
override allow permissions. The result is the user’s effective permissions for the
resource.
■ When you grant permissions, grant users the minimum permissions that they need
to get their jobs done. This is referred to as the principle of least privilege.
■ When you move files or folders within an NTFS volume, permissions that have
been directly assigned to the file or folder carry over to the new location. In all
other cases of moving and copying, existing permissions are lost, and the object
will inherit permissions from the new parent. When moving to a FAT volume, permissions
are lost entirely.
access control entry (ACE) A specific entry on the ACL that grants or denies a user
or group access to a resource.
access control list (ACL) A list of all user accounts and groups that have been
assigned permissions for the file or folder, as well as the permissions that they
have been assigned.
effective permissions The permissions level that a user actually has, taking all permission
sources into account.
NTFS permissions Assignments that specify which users and groups can access files
and folders and what they can do with the contents of the files or folders. NTFS
permissions are available only on NTFS volumes.
owner The user who created a file, folder, or printer.
permissions inheritance The process of a file or folder receiving permissions
based on the permissions assigned to the object’s parent folder.
Traverse Folder A permission that allows or denies moving through folders to
access other files or folders, even when the user has no permissions for the traversed
folder (the folder that the user is moving through).