| Author |
This question stumped me!
|
|
|
| Hello all! I was doing an online quiz and this quesiton got me.
>>Question 7: Sally, a member of the Marketing group and the Managers group, is attempting to access a file that is stored on one of her company's servers. The file is shared out on a volume that has been formatted with the NTFS file system. The share permissions and NTFS permissions are as follows:
Share Permissions:
Sally - Allow Change Managers - Allow Full Control Marketing - Deny Full Control
NTFS Permissions (for the folder and all contents of the folder):
Managers - Allow Read Finance - Allow Full Control
What will Sally's effective permission be to the folder and its contents when she attempts to access it over the network?
Correct Answer: D
No Access
Your Answer: C
Change (Read, Write, Execute and Delete) <<<
If someone could explain to me why the answer is "No access" | |
| TxBear 2002-04-09, 5:30 pm |
| I may be wrong, but she is a memeber of marketing and mareting has deny full control.
I think that would override her other permissions. Doesn't deny override all other permissions? | |
| mrfixit 2002-04-09, 5:31 pm |
| Right! The most restrictive permission applies. | |
| IT 1588 2002-04-10, 12:38 am |
| Share permission always exceeds NTFS permission.
Deny permission overrides any Allow permission.
Therefore, deny Full Control means you don't have any control(including Read and Change) at all. Since you lost all rights in Share permission, any NTFS permissions would be useless to you. | |
|
| The NTFS permission would allow you to access the files if you were loged in locally. As this is a server Sally probably can't. I have been in small offices where the server is used as a workstation.
P.S. Its a bad thing and I always try to get them to stop. | |
| DarthBud 2002-04-10, 2:59 pm |
| I agree it is because when accessing remotely instead of locally the lowest level of permissions are effective. | |
| Tekwannabe 2002-04-10, 4:59 pm |
| quote:
Originally posted by IT 1588
Share permission always exceeds NTFS permission.
I think the most restrictive permission applies on this one.Example if you have full control permission and read ntfs permission you will only have read permission,Is that right? | |
| bbraunstein 2002-04-11, 12:37 am |
| Yes, deny access always takes priority.
If you want to see it for yourself, create a user account on your machine and fool around with folder share and NTFS file permissions so you can see for yourself what happens. It sure helped me!
BB | |
| ipkwokwai 2002-04-11, 1:07 am |
| As usual security principle:
Most restriction or least privilege access! |
|
|
|