|
Home > Archive > 70-073 workstation > February 2001 > NTFS and SHARE permissions
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
NTFS and SHARE permissions
|
|
|
| I am going to take my exam tomorrow, I am having a little trouble with how ntfs and share permissions relate to each other. For example, a user belongs to 3 different groups, each having different permissions locally and remotely.
NTFS SHARE
----- ------
add full access
change read
read add
What would be the permissions locally and remotely for the user?
That type of question...most of the time I get them right, but only because I just eliminate the wrong answers, but I need to know how to actually figure out what is going on here. If any of you can help me I appreciate it. Also if you know any last minute good study sites or guides just to go over one more time thanks.
Eric | |
|
| Hi oihjk,
Ok, first thing I'll tell you is that there is no "ADD" Share permission. The 4 Share permissions are "No Access", "Read", "Change", and "Full Control"
Next, I'm assuming that the "Full Access" Share permission you have listed is "Full Control"
Next, Share permissions only apply (and combine with NTFS permissions where applicable) if the resource is being hit over the network. If you access that same resource locally only NTFS permissions apply, the Share permissions do not.
So for your question... I always made a chart similar to what you did. Line up the NTFS permissions in a column and the least restrictive is the NTFS permission for that resource (except for "No Access" which always wins out). Now do the same thing with the Share permissions. (Again, "No Access" wins out if it's there)
For this problem, I come up with NTFS permission - "Change" Share permission - "Full Control"
Local Permission would just be the NTFS permission - "Change"
Remote Permission - The most restrictive of combining the NTFS - "Change" and Share - "Full Control" permissions which would be "Change"
Usually in the field we Administrator types like assigning Full Control Share permissions to everything then tightening those resources down with NTFS permissions. It makes it easier to administer and just as secure.
Sorry for the long post (I tend to babble sometimes  )
Hope this Helps! | |
|
| Thanks that helps a lot i wasn't really sure how to combine the permissions or whatever(you know what I mean)but thanks a bunch. |
|
|
|
|