MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

8-38 Chapter 8 Securing Resources with NTFS Permissions
Page
8-15
5. What are a user’s effective permissions for a resource?
A user’s effective permissions for a resource are the sum of the NTFS permissions assigned to
the individual user account and to all of the groups to which the user belongs. If there are any
Deny permissions set, they override all instances in which that permission is allowed and must
be removed from the user’s effective permissions.
6. By default, what inherits the permissions that you assign to the parent folder?
By default, the permissions that you assign to the parent folder are inherited by and propagated
to the subfolders and files that are contained in the parent folder.
Lesson 2 Practice: Planning and Assigning NTFS Permissions
Exercise 2: Determining the Default NTFS Permissions for a Folder
6. What are the existing folder permissions?
The Administrators group has Full Control. The CREATOR OWNER has special permissions, Full
Control. The account that created the folder has special permissions, Full Control of subfolders
and files only. SYSTEM has Full Control. The Users group has Read & Execute, List Folder Contents,
Read, and special permissions of Create Files/Write Data and Create Folders/Append
Data.
Exercise 3: Testing the Folder Permissions for the Public Folder
4. Were you successful? Why or why not?
Yes, because the Users group is assigned the special permissions of Create Files/Write Data
and Create Folders/Append Data for the Public folder.
6. Were you able to complete all of these tasks and why?
Yes, because the Users group is assigned the special permissions of Create Files/Write Data
and Create Folders/Append Data for the Public folder.
10. Which tasks were you able to perform and why?
You can open the file because the Users group has Read permission for the Public folder. When
you attempt to modify the file, you get an error message. You cannot modify the file because
the Users group does not have either Full Control or Modify permissions for the Public folder.
Users can create files and folders in the Public folders, and they have Full Control permission
for the file and folders that they created, but they cannot modify files and folders for which they
are not the creator or owner. You cannot delete the file because only the owner of a file and
members of the Administrators group have Full Control of the file by default.