Question 9 of 14
You share a folder named Public and configure the following permissions.
Share permissions
NTFS permissions
Everyone = Full Control Administrators = Full Control
Sales = Modify
Assistants = Deny Modify
You receive a phone call from Sally, a member of the Sales group and Assistants group, claiming that she
cannot save a file to the Public shared folder.
You want to make sure that members of the Sales group (who are not members of the Assistants group) can
save new files to the Public shared folder and access, update, and delete existing files in the Public share . You
want to continue to ensure that members of the Assistants group cannot modify files in the Public shared
folder, even if they are members of the Sales group. However, you also want to let Sally update files in the
Public share.
What should you do?
0 Tell Sally to log off and back on.
0 Grant the Sales group the Allow Full Control NTFS permission.
0 Grant the Sales group the Allow Modify NTFS permission.
0 Grant the Sales group the Allow Write NTFS permission.
0 Grant the Sales group the Allow Change shared folder permission.
@ Remove Sally from the Assistants group.
0 Remove the Assistants group from the access control list.
Explanation
Deny permissions override Allow permissions. Even though Sally is allowed to modify the contents of the folder through
her membership in the Sales group, she cannot modify the contents of the folder because she is denied permissions
through her membership in the Assistants group. One solution is to remove Sally from the Assistants group. Removing
the Assistants group from the access control list would let all assistants who are also members of the Sales group modify
the contents of the folder.
Objectives
Objectives for MS 70-41 0:
201 Configure file and share access
References
LabSim for Windows Server Pro: Install and Configure, Section 6.5.
[Questions.exm 290_3-4 #119 [95]]