70-215 QOTD 30/06/2004

Discussion in 'Windows Server 2003 / 2008 / 2012 / 2016' started by AJ, Jun 30, 2004.

  1. AJ

    AJ 01000001 01100100 01101101 01101001 01101110 Administrator

    6,897
    182
    221
    You have a new Personnel Officer, Gavin, who is reporting for work tomorrow. Now, your IT Manager, Simon, needs you to make sure that Gavin can gain access to a folder on the file server, which is designated to him.

    Gavin is a member of the Personnel group and the Senior Management group. The permissions for the folder are configured as below:

    Share Permissions:

    Gavin - Full Control (Allow)
    Personnel - Read (Allow)
    Senior Management - Change (Allow)

    NTFS Permissions (for the folder and all contents of the folder):

    Gavin - Read (Allow)
    Personnel - Full Control (Allow)
    Senior Manegment - Full Control (Deny)

    What will Gavin's effective permissions be to the folder and why?

    A) Full Control.

    B) Change.

    C) Read.

    D) Deny Access.
     
    Certifications: MCSE, MCSA (messaging), ITIL Foundation v3
    WIP: Breathing in and out, but not out and in, that's just wrong
  2. AJ

    AJ 01000001 01100100 01101101 01101001 01101110 Administrator

    6,897
    182
    221
    Well you lot have had 3 days to answer this one and no takers. Sorry peeps it's now staying until Monday when I expect plenty of answers to this one :twisted:
     
    Certifications: MCSE, MCSA (messaging), ITIL Foundation v3
    WIP: Breathing in and out, but not out and in, that's just wrong
  3. nugget
    Honorary Member

    nugget Junior toady

    7,796
    71
    224
    Sorry AJ, been a bit busy but I'll take a pop at C:Read.

    As far as I remember share permissions give the least restrictive and ntfs gives the most restrictive privledges.[​IMG]
     
    Certifications: A+ | Network+ | Security+ | MCP (270,271,272,290,620) | MCDST | MCTS:Vista
    WIP: MCSA, 70-622,680,685
  4. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    180
    287
    C. I believe NTFS permissions trump share permissions.
     
    Certifications: A+ and Network+
  5. Jakamoko
    Honorary Member

    Jakamoko On the move again ...

    9,924
    74
    229
    Sorry AJ - must have missed this one. My bad :oops:


    Anyway, my answer - D Deny Access. As a member of Senior Management, I have Full Control denied, and as permissions are cumulative, I say I aint reading nuffink :(

    Fairly sure Deny overules Allow, but now I'm starting to doubt ...

    D it is for me.
     
    Certifications: MCP, A+, Network+
    WIP: Clarity
  6. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    180
    287
    I saw that too and a deny always wins...but it's deny FULL CONTROL...would that preclude any lesser permission such as a simple Read???
     
    Certifications: A+ and Network+
  7. Jakamoko
    Honorary Member

    Jakamoko On the move again ...

    9,924
    74
    229
    Well, if Full Control is basically all the privileges available together, and you Deny it, then I reckon the book is closed.

    Stand corrected as always.

    Mind you, knowing AJ, the answer will probably be "unattend.txt" :biggrin
     
    Certifications: MCP, A+, Network+
    WIP: Clarity
  8. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    180
    287
    I thought it was going to be dcpromo, or is that next week? :blink
     
    Certifications: A+ and Network+
  9. flex22

    flex22 Gigabyte Poster

    1,679
    0
    69
    D ..................................................is the effective permission.

    If it had come down to a choice over Share or NTFS, I wouldn't know what to put.The reason being that i don't know whether Gav is accessing the file server locally or via a client.
     
  10. Bluerinse
    Honorary Member

    Bluerinse Exabyte Poster

    8,878
    181
    256
    Flex, the question states that Gavin needs to access a file that is on a file server. Though it does not state whether he is accessing it across the network or whether he is accessing it locally, I think we can assume that it is across the nework because it is not normal practice to allow any user to sit at a file server to do their work.

    The answer is D

    Deny rules okay, use it sparingly

    Pete
     
    Certifications: C&G Electronics - MCSA (W2K) MCSE (W2K)
  11. AJ

    AJ 01000001 01100100 01101101 01101001 01101110 Administrator

    6,897
    182
    221
    Good one guys, I love these questions about permissions really gets the grey matter going.[​IMG]

    Correct answer is: D

    Explanation: When you share a folder on a partition formatted with NTFS, both the shared folder permissions and the NTFS permissions combine to secure file resources.

    NTFS permissions apply whether the resource is accessed locally or over a network.

    When you combine NTFS permissions and shared folder permissions, the resulting permission is the most restrictive permission of the combined shared folder permissions or the combined NTFS permissions.

    Couldn't have said it better Pete. Deny overrides all permissions
     
    Certifications: MCSE, MCSA (messaging), ITIL Foundation v3
    WIP: Breathing in and out, but not out and in, that's just wrong

Share This Page

Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.