Exam 70-680 topic 3 question 39 discussion

Actual exam question from Microsoft's 70-680

Question #: 39
Topic #: 3

You have a computer that runs Windows 7. The computer is a member of a domain.
You share D:\data as Data. You assign Everyone Full control share permissions to the folder. No other share permissions are assigned to the folder.
From another computer, you attempt to create a file in the Data share by using a domain account named User1. You receive the following error message:
"Destination Folder Access Denied".
You need to ensure that you can create files in the Data share by using the User1 account.
What should you do?

A. Create a local user named User1.
B. Add User1 to the local Power Users group.
C. Assign User1 Write NTFS permission on the D:\data folder.
D. Assign User1 Full control share permissions to the Data share.

Show Suggested Answer

Suggested Answer: C 🗳️
Share permissions apply to users who connect to a shared folder over the network. Share permissions do not affect users who log on locally, or log on using
Remote Desktop. To set permissions for users who log on locally or using Remote Desktop, use the options on the Security tab instead of the Share Permissions tab. This sets permissions at the NTFS file system level. If both share permissions and file system permissions are set for a shared folder, the more restrictive permissions apply when connecting to the shared folder. For example, to give Read access on a shared folder to users in your domain, on the Share Permissions tab, set permissions for the Everyone group to Full Control. On the Security tab, specify more restrictive access by setting the permissions for the Domain Users group to Read access. The result is that a user who is a member of the Domain Users group has read-only access to the shared folder whether the user is connected through a network share, through Remote Desktop, or is logged on locally.

Permissions -
The Read permission allows a user or group to access a file or folder but does not allow modification or deletion. The Change permission includes the read permission but also allows you to add files, delete files, and modify files in the shared folder. This permission is equivalent to the Read/Write permission in the basic File Sharing dialog box. The Full Control permission includes all the rights conferred by the Change and Read permissions. It also allows the user assigned that permission to modify the permissions of other users. Full Control is equivalent to the basic sharing Owner permission, though unlike basic sharing, where there can only be one user assigned the Owner permission, you can assign the Full Control permission to users and groups.
NTFS permissions You can configure the local NTFS permissions for a shared folder or volume using Share and Storage Management in the following ways: New shared resources. In the Provision a Shared Folder Wizard, before you select a network sharing protocol, you can change the NTFS permissions for the folder or volume you will be sharing. These NTFS permissions will apply both locally and when accessing the resource over the network. To change the NTFS permissions, on the NTFS Permissions page, select Yes, change NTFS permissions, and then click Edit Permissions. Existing shared resources. You can change the NTFS permissions of a shared folder or volume listed on the Shares tab. To change the NTFS permissions, select the folder or volume, in the Actions pane click
Properties, and on the Permissions tab, click NTFS Permissions.

by gomatetu at April 4, 2025, 4:02 p.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!