Hello,

I am studying for the 70-290 exam. Does anyone have any suggestions on how to find the effective permission(s) when combining shared folder and NTFS permissions?

Thank you.

When combining shared folder permissions and NTFS permissions, it is always the most restrictive permission that is the effective permission.

Do you have a book you're reading? What are you using to study?

Quote:

---

Originally Posted by EOS

When combining shared folder permissions and NTFS permissions, it is always the most restrictive permission that is the effective permission.

Do you have a book you're reading? What are you using to study?

---

I understand the concepts of most restrictive and effective permissions. What I don't understand is the relationship of a shared folder to NTFS permissions. I know this sounds rudimentary but I am having trouble visualizing what is happening.

For example, if an administrator shares a folder called UserData. Then wants users to only be able to create and modify documents.

My question is what is the permission for UserData (the shared folder) and the permissions for NTFS?

Thank you.

PS. I am reading "Managing and Maintaining a Microsoft Windows Server 2003 Environment Training Kit".

Share permissions are a top level type of permission.

NTFS permissions are assigned indvidually to files and folders.

For example: If you want Group A and Group B to access a share and not Group C, you would assign share level permissions - FULL CONTROL - to Groups A and B but not C.

Then inside of the share, you have files and folders. If you want Administrators to be able to administer permissions to all files and folders, they would get NTFS permissions to all objects of FULL CONTROL. If you want Group A to have the ability to change, add and delete files to a set of folders, you would assign NTFS permissions of CHANGE to these folders and Group B may get similar permissions on other folders. However, you would give neither group FULL CONTROL on the NTFS permissions because this means that they would be allowed to administer the permissions.

In short, the top level permissions for the share set basic access - who can and can not access the share. The NTFS permissions are used to set very specific permissions on the folders and sub folders. They are used to restrict even further, the higher share level permissions. You have to work from the top down.

Go To The Following Link
I think this is lot help to u

Www.ntfs.com › NTFS Permissions

Thanks and regards

Soumya kanta dasgupta
System Admin