70-698 · Question #149
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…
The correct answer is B. No. Setting the Everyone share permission to Full Control alone does not resolve the issue because effective network permissions are the most restrictive combination of share and NTFS permissions.
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this scenario, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. A company has a client device that runs Windows 10 Pro. The device has a folder named Folder1. The folder is configured using the following settings:
A user reports that they cannot change documents when accessing them over the network. You need to ensure that the users can change documents in the folder. Solution: You set the Everyone group share permission to Full Control. Does the solution meet the goal?
Options
- AYes
- BNo
How the community answered
(52 responses)- A29% (15)
- B71% (37)
Why each option
Setting the Everyone share permission to Full Control alone does not resolve the issue because effective network permissions are the most restrictive combination of share and NTFS permissions.
This is incorrect because a Full Control share permission cannot override a restrictive NTFS permission - NTFS remains the limiting factor for effective network access.
When a user accesses a folder over the network, Windows calculates effective permissions as the most restrictive intersection of share permissions and NTFS permissions. Even if Everyone is granted Full Control at the share level, a restrictive NTFS permission (such as Read or Read and Execute) still caps the user's effective access to read-only. Both the share permission and the NTFS permission must allow write access for the user to modify documents over the network.
Concept tested: Effective network permissions - share vs NTFS intersection
Source: https://learn.microsoft.com/en-us/windows-server/storage/file-server/ntfs-permissions-and-share-permissions
Topics
Community Discussion
No community discussion yet for this question.