| Author |
Permissions - Accumulative but Most Restrictive Applies
|
|
|
| Hey all,
I got this question from a Practice Exam - "Bob must be able to add files to the folder when he accesses the folder remotely. Therefore, he must have at least Change share permission to the folder. Bob is a member of the GroupA and Group B. GroupA has Full Control local and share access to the folder. GroupB has Read share access and Change local access. Therefore, Bob's effective share permission to the folder is Full Control, which will allow him to add files to the folder when he accesses it remotely"
Since the most restrictive applies, shouldn't the effective permission be Read share from GroupB? | |
|
| I believe you are taking the most restrictive permissions too soon in your calculation.
Hitting resource over the network, so we need to look at both Share and NTFS permissions (why they call them local permissions is beyond me).
Group A) Share = FC and NTFS = FC
Group B) Share = Read and NTFS = Change
Now figure out cummulative (least restrictive) of Share permissions, and then figure out cummulative (least restrictive) of the NTFS permissions.
Cummulative of the Share permissions = FC
Cummulative of the NTFS permissions = FC
Now take most restrictive of the cummulative share and cummulative NTFS permissions.
Most restrictive of the cummulative Share and cummulative NTFS permissions is Full Control.  | |
| DXU76 2004-02-22, 12:45 am |
| So to figure out the effective permission applied, I'd have to:
1. Figure out cummulative (least restrictive) of Share permissions
2. Figure out cummulative (least restrictive) of the NTFS permissions
3. Now take most restrictive of the cummulative share and cummulative NTFS permissions
Right? | |
|
| You are correct.
Also remember that the Share permissions are only applied when accessing the resource over the network. | |
|
| Thanks, appreciate the help. |
|
|
|