1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Help with Permissions

Discussion in 'Windows Vista / 7 / 8 Client Exams' started by SolidSponge, Feb 23, 2007.

  1. SolidSponge

    SolidSponge Bit Poster

    40
    0
    21
    Need someone to clarify this for me please :biggrin

    I'm doing a few mock exams at the moment and one section I'm struggling on is Share and NTFS Permissions.

    For example, I've just had a question and I was convinced I had it right but I got it wrong and I don't see how!?

    Question was...

    Your are the desktop admin for xxxx network. xxxx network consists of a single AD domain. Helen, a domain user in the HR dept, reports that her Windows XP PC is running out of Hard Disk space.
    To solve this problem you decide to implement file compression on the archive folders on her Hard Disk. You log in as local Administrator and you attempt to compress the folders but you get the following error...

    An error occurred applying attributes to the file:

    C:\Archives\HRDocs\Inactive\Emplist.doc

    Access is denied

    To troubleshoot this you start by reviewing the NTFS permission of the local Administrators group on Helen's computer. The NTFS Permissions are as follows...

    [​IMG]

    You need to compress files and folders on Helen's computer. What should you do?

    A. Instruct Helen to un-encrypt the files and folders that you want to compress
    B. Take ownership of the files and folders. Then select the Compression attribute for the files and folders
    C. Grant the local administrator account Allow-Full Control permission on the files and folders
    D. Grant the local administrator account Allow-Modify permission on the files and folders


    Now I thought the answer would be A. Why? Well because it's the only one that makes sense after looking at the permissions example.
    I know the answer now and sort of understand why (after looking at it again), but if anyone would like to have a go and give me your reasoning for the answer then that would be great :biggrin
     
    Certifications: A+, MCP (70-270)
    WIP: 70-290
  2. Mr.Cheeks

    Mr.Cheeks 1st ever Gold Member! Gold Member

    5,369
    85
    190
    I would of selected

    B. Take ownership of the files and folders. Then select the Compression attribute for the files and folders

    as
    A - not relevant NTFS if i recall correctly can only do one of the other, either compress or encrypt...
    C & D - Thats a NO NO, your the Admin, you have control!

    Im sure others will input
     
  3. BosonMichael
    Highly Decorated Member Award

    BosonMichael Yottabyte Poster

    19,136
    462
    374
    Where'd you pull this question from? Wouldn't want you or CertForums to get into any copyright violation issues, ya know?
     
    Certifications: CISSP, MCSE+I, MCSE: Security, MCSE: Messaging, MCDST, MCDBA, MCTS, OCP, CCNP, CCDP, CCNA Security, CCNA Voice, CNE, SCSA, Security+, Linux+, Server+, Network+, A+
    WIP: Just about everything!
  4. Sparky
    Highly Decorated Member Award

    Sparky Zettabyte Poster Moderator

    10,189
    296
    319
    I`ll guess C


    Just to note that admins dont always have full control but they do have the right to take ownership :biggrin
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) Security+ Network+ A+
    WIP: Exchange 2007\2010
  5. Mr.Cheeks

    Mr.Cheeks 1st ever Gold Member! Gold Member

    5,369
    85
    190
    dammit! never realised it said local administrator! *note to self again, always read questions 3 times.
     
  6. SolidSponge

    SolidSponge Bit Poster

    40
    0
    21
    Don't wory it's been re-worded a lot, but it's pretty much the gist of the question I had. Oh and the screenshot is from my PC too as the one on the exam was awful!
     
    Certifications: A+, MCP (70-270)
    WIP: 70-290
  7. Sparky
    Highly Decorated Member Award

    Sparky Zettabyte Poster Moderator

    10,189
    296
    319
    To be honest Im not sure what the answer is, B is a possibility.

    I only said that admins dont always have full control. For example a roaming user profile on a server cant be viewed by the domain admins group but you can take ownership if required and change the permissions.
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) Security+ Network+ A+
    WIP: Exchange 2007\2010
  8. SolidSponge

    SolidSponge Bit Poster

    40
    0
    21
    Answer was B.

    First I thought, that can't be right as it clearly shows that the Administrator doesn't have Take Ownership. But they're Admins right, so surely they can grant themselves Full Control? Or am I missing something?
     
    Certifications: A+, MCP (70-270)
    WIP: 70-290
  9. SolidSponge

    SolidSponge Bit Poster

    40
    0
    21
    Yeh that's what I thought first, then changed it. I just wanted to get some other opinions on it too as I have my exam next week and this is this one area I'm constantly having problems with! :(
     
    Certifications: A+, MCP (70-270)
    WIP: 70-290
  10. Sparky
    Highly Decorated Member Award

    Sparky Zettabyte Poster Moderator

    10,189
    296
    319
    Yes, the admins can take ownership and then grant themselves permissions.
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) Security+ Network+ A+
    WIP: Exchange 2007\2010
  11. dales

    dales Gigabyte Poster

    1,997
    46
    97
    would you get a diff error message then if you try to compress an encrypted file.
     
    Certifications: vExpert 2014+2015+2016,VCP-DT,CCE-V, CCE-AD, CCP-AD, CCEE, CCAA XenApp, CCA Netscaler, XenApp 6.5, XenDesktop 5 & Xenserver 6,VCP3+5,VTSP,MCSA MCDST MCP A+ ITIL F
    WIP: Nothing
  12. dales

    dales Gigabyte Poster

    1,997
    46
    97
    tried it out at home, made a new folder and created a subfolder with a text doc in it, encrypted the subfolder and applied to folder contents. Then compressed the parent folder, it compressed the parent folder but left the encrypted folder alone, with no error message or anything.
     
    Certifications: vExpert 2014+2015+2016,VCP-DT,CCE-V, CCE-AD, CCP-AD, CCEE, CCAA XenApp, CCA Netscaler, XenApp 6.5, XenDesktop 5 & Xenserver 6,VCP3+5,VTSP,MCSA MCDST MCP A+ ITIL F
    WIP: Nothing
  13. Mr.Cheeks

    Mr.Cheeks 1st ever Gold Member! Gold Member

    5,369
    85
    190
    as far as i am aware, you cannot compress an encrypted folder, or encrypt a compress folder. the folder can only be one of the two; either encrypted or compressed but not both.
     
  14. Kerfuffle

    Kerfuffle Nibble Poster

    52
    0
    21
    But what are you actually doing - permissions wise - when you attempt to compress a folder. Surely you are only changing an attribute and according to the question, the admin has write attributes and write extended attributes. Surely he/she doesn't need to own the folder and take full control?
     
    Certifications: A+, Network+, ITIL v3, 70-270
    WIP: 70-290
  15. Kerfuffle

    Kerfuffle Nibble Poster

    52
    0
    21
    Sorry guys, I've gotta bump this as I can't seem to find specific information out there on the Web with regards to what exactly each of the special permissions do. Please correct me if I'm wrong but writing attributes includes compressing and encrypting folders.

    I've got the 70-270 Sybex and MS book plus I am trawling the web and this forum but I'm still unclear. Why can't he/she compress this folder as is? What, exactly, is stopping them from doing this?

    Forgive me for this persistent ignorance, but I can't justify it at the moment in my head. I'm in a right kerfuffle
     
    Certifications: A+, Network+, ITIL v3, 70-270
    WIP: 70-290
  16. paradoxni

    paradoxni Nibble Poster

    58
    2
    32
    I would have said B basically because the files are Helens, she created them so her account has ownership - therefore SHE can enable compression (or encryption but not both at the same time).

    As an admin you can access her files, read /edit/delete etc. but you must be the owner of the files to enable compression on them, therefore answer B is correct, you take ownership of the files and this then allows you to enable compression.

    Im not basing this on any book or training material thou, just from what I think makes sense to me.. and i passed 270 recently and had a very similar question on the exam. Though I can barely keep my eyes open so this may make no sense to even me in the morning:)
     
    Certifications: A+, Network+, MCP, MCDST, CCENT
    WIP: Server+
  17. BosonMichael
    Highly Decorated Member Award

    BosonMichael Yottabyte Poster

    19,136
    462
    374
    I want to know where the question came from in the first place. If from the live exam, it's a braindump. If from a study guide or practice exam, it's copyrighted. Any way you slice it... it probably ought not be here.
     
    Certifications: CISSP, MCSE+I, MCSE: Security, MCSE: Messaging, MCDST, MCDBA, MCTS, OCP, CCNP, CCDP, CCNA Security, CCNA Voice, CNE, SCSA, Security+, Linux+, Server+, Network+, A+
    WIP: Just about everything!

Share This Page

Loading...