You have a file server named Server1 that runs Windows Server 2012 R2. Server1 contains a folder named
Folder1.
You share Folder1 as Share1 by using Advanced Sharing. Access-based enumeration is enabled.
Share1 contains an application named Appl.exe.
You configure the NTFS permissions on Folder1 as shown in the following table.
The members of Group2 report that they cannot make changes to the files in Share1. The members of Group1
and Group2 run Appl.exe successfully.
You need to ensure that the members of Group2 can edit the files in Share1.
What should you do?
A.
Replace the NTFS permissions on all of the child objects.
B.
Edit the Share permissions.
C.
Edit the NTFS permissions.
D.
Disable access-based enumeration.
Explanation:
Share permissions and NTFS permissions are independent in the sense that neither changes the other. The
final access permissions on a shared folder are determined by taking into consideration both the share
permission and the NTFS permission entries. The more restrictive permissions are then applied.Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter8: File Services and Storage,
Lesson 2: Provisioning and Managing Shared Storage, p.388
Answer should be B.
nothing is wrong with the NTFS permissions thus the share permissions must be wrong. If NTFS was the most restrictive it would still allow them to edit.
7
0
exacly it should allow to make changes
2
0
the NTFS permissions should have “Modify” in order to change existing files. The permissions specified allows Group 2 to read, execute and write new files. Modify is not listed. DL Sends
4
4