70-290 Managing and Maintaining a Microsoft Windows Server 2003 Environment Online Class

Demo Question 10.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. All servers on the EliteCertify.com network run Windows Server 2003 and all client computers run Windows XP Professional. Users in the Research department require a shared folder for their exclusive use. The Research users require the ability to read, edit, and delete files in the shared folder. A shared folder with default share permissions has been created. You grant the Allow - Full Control NTFS permission to the Administrators group members and the Allow - Modify NTFS permission to the Research users. However, Research users report that they are NOT able to access the shared folder. You have received instruction from the CIO to solve this problem. How will you accomplish the task?

A. Grant the Research users the Allow - Full Control share permission.
B. Change the folder setting to Documents (for any file types.)
C. Grant the Research users ownership to the folder.
D. Grant the Research users the Allow - Delete Sub Folders and Files NTFS permissions to the folder.


Display Answer

Answer: A

Explanation: By default, the Everyone group has only Read and Execute permissions on the root of each drive. These permissions are not inherited by subfolders; the Everyone group has no permissions by default to a newly created folder or file. Similarly, when you create a shared drive or folder, the Everyone group now has only Read permission by default, rather than full control. This is quite a change from earlier versions of Windows, where every new folder gave everyone full control via both NTFS and share permissions. To grant the Research users access to the shared folder so that that can read, write, edit and delete files, they need the Allow-Full control permission. Incorrect answers: B. Changing the file type to whatever type will not solve the problem of access to the shared folder. It is a permissions issue not a file type issue. C. Taking Ownership enables the object to change the owner of a file or folder to the object's user ownership. But what is needed in this scenario is to have Allow-Full Control permission. Changing ownership of the file effectively removes the user that created the file from the CREATOR OWNER group for that file, and that user's access to the file reverts to the default access he or she has based on the folder permissions. D. Assigning the Allow-Delete Subfolders and Files permission to the accounting users enables the object to delete a file or subfolder, even if the Delete permission has not been granted to the object. Though, this does not solve the access problem. Reference: Deborah Littlejohn Shinder, Dr. Thomas W. Shinder, Laura E. Hunter & Will Schmied, MCSA/MCSE. Exam : Managing and Maintaining a Windows Server 2003 Environment, Study Guide and DVD training system, Syngress Publishing, Rockland, MA, 2003, pp. 420 - 421, 423