PrepAway - Latest Free Exam Questions & Answers

You need to ensure that the members of L_Sales can add files to Share1

You have a file server named File1 that runs Windows Server 2012 R2.
File1 contains a shared folder named Share1. Share1 contains an application named
SalesAppl.exe.
The NTFS permissions for Share1 are shown in the following table.

The members of L_Sales discover that they cannot add files to Share1. Domain users can
run SalesAppl.exe successfully.
You need to ensure that the members of L_Sales can add files to Share1.
What should you do?

PrepAway - Latest Free Exam Questions & Answers

A.
Add L_Sales to the Domain Users group.

B.
Edit the NTFS permissions.

C.
Add the Domain Users group to L.Sales.

D.
Edit the Share permissions.

Explanation:
The least restrictive permission applies here, so the users from L_sales have read &
execute, write… in order to add files they need the NTFS permission called MODIFY.
Based on NTFS permissions:
Modify: Users can view and modify files and file properties, including deleting and adding
files to a directory or file properties to a file.

13 Comments on “You need to ensure that the members of L_Sales can add files to Share1

  1. PeterPan says:

    Correct answer is D, change the share permissions.
    Domain users can run apps, that only requires read & execute access. So we can ignore this fact.
    L_Sales have NTFS write access, this lets them write new files.
    The only thing we are not told is the share permissions, They must be set to read only.

    PS, I’ve tested this in my lab.




    0



    0
  2. JD says:

    The NTFS permission levels are as follows:

    (Full Control)
    Users can do anything to the file, including taking ownership of it. It is recommended that you grant this level of access only to administrators.

    (Modify)
    Users can view and modify files and file properties, including deleting and adding files to a directory or file properties to a file. Users cannot take ownership or change permissions on the file.

    (Read & Execute)
    Users can run executable files, including scripts.

    (List Folder Contents)
    Users can view a list of a folder’s contents.

    (Read)
    Users can view files and file properties.

    (Write)
    Users can write to a file.

    You will find this at:
    https://technet.microsoft.com/en-us/library/Cc784990(v=WS.10).aspx

    As you can see, the (Write) NTFS permission does not say anything about adding files, only that you can write to a file. The only permission that says it can add files is the (Modify) NTFS permission.

    Write Attributes
    – Allows or denies changing the attributes of a file or folder, for example, “read-only” or “hidden”.
    – The Write Attributes permission does not imply creating or deleting files or folders, it only includes the permission to make changes to the attributes of an existing file or folder.

    Correct answer is:
    B. Edit the NTFS permissions.




    0



    0
  3. Gustello says:

    Before I tried it in my lab I would have agreed to JD.
    But now I know, that a user with read&execute and write permission is able to create files and folders.
    Even when the user1 has only read and write it was able to create files, allthough a message pop said that it needs additional permissions.
    (No, I didn’t use an administrative account and yes, I stopped inheritance and removed all permissions exept Administrators and System.)

    These are the fact’s, but I am not sure what to choose in the test, because sometimes the “correct answers”(which give you the points) have nothing to do with the real world šŸ˜‰




    0



    0
  4. MancaMulas says:

    I would choose D here, since Write permits adding files, and between share and ntfs permissions, the most restrictive permissions apply, i suppose share permissions are in command here. šŸ™‚

    Reference:

    “Write – Permits adding of files and subfolders”

    https://technet.microsoft.com/en-us/library/bb727008.aspx

    “When using share permissions and NTFS permissions together, if there is a conflict in the configuration, the most restrictive permission prevails”

    http://www.ntfs.com/ntfs-permissions-combined.htm




    0



    0
  5. Johon Snow says:

    Just tested it in an 2012 server , just wirte permissons (without Modify) can create files. But in a share folder if the permissoes is just with read , even if you have full access NTFS you cant write in the share.
    So i will stay with D.




    0



    0
  6. Andreas says:

    Questions like this can make anyone with the actual knowledge to fail the test, when it’s so difficult to understand. Understand the concept of making questions that require you to read it properly, but this i rediculus.




    0



    0

Leave a Reply