MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

9-32 Chapter 9 Administering Shared Folders
Page
9-21
Page
9-23
Lesson 2 Practice: Combining Permissions
1. In the first example, the Data folder is shared. The Sales group has the shared
folder Read permission for the Data folder and the NTFS Full Control permission
for the Sales subfolder. What are the Sales group’s effective permissions for the
Sales subfolder when they gain access to the Sales subfolder by making a connection
to the Data shared folder?
The Sales group has the Read permission for the Sales subfolder because when shared folder
permissions are combined with NTFS permissions, the more restrictive permission applies.
2. In the second example, the Users folder contains user home folders. Each user
home folder contains data accessible only to the user for whom the folder is
named. The Users folder has been shared, and the Users group has the shared
folder Full Control permission for the Users folder. User1 and User2 have the NTFS
Full Control permission for their home folder only and no NTFS permissions for
other folders. These users are all members of the Users group. What permissions
does User1 have when he or she accesses the User1 subfolder by making a connection
to the Users shared folder? What are User1’s permissions for the User2
subfolder?
User1 has the Full Control permission for the User1 subfolder because both the shared folder
permission and the NTFS permission allow Full Control. User1 cannot access the User2 subfolder
because she or he has no NTFS permission to gain access to it.
Lesson 2 Review
1. If you are using both shared folder and NTFS permissions, the ______________
(least/most) restrictive permission is always the overriding permission.
Most
2. Which of the following statements about combining shared folder permissions and
NTFS permissions are true? (Choose all that apply.)
a. You can use shared folder permissions on all shared folders.
b. The Change shared folder permission is more restrictive than the Read NTFS
permission.
c. You can use NTFS permissions on all shared folders.
d. The Read NTFS permission is more restrictive than the Change shared folder
permission.
The correct answers are A and D. B is not correct because the Read NTFS permission is more
restrictive than the Change shared folder permission. C is not correct because you can use
NTFS permissions only on volumes formatted with NTFS, whereas you can use shared folder
permissions on volumes formatted with NTFS or FAT.