A folder D:\Files\Marketing has the following NTFS permissions: - Administrators: Full Control - Marketing: Change and Authenticated - Users: Read It has been shared on the server as "MARKETING", with

No access would apply only if the user had no valid NTFS permissions or no share permissions whatsoever; the Sales user inherits at minimum Read access through NTFS Users group membership.

Full Control requires both Full Control NTFS and Full Control share permissions simultaneously; the Sales user holds neither for this resource.

The Sales user is not a member of the Administrators or Marketing groups but falls under the built-in Users group, which holds NTFS Read permission on the folder. The share grants Full Control only to the Marketing group, so the Sales user receives no elevated share-level access. The intersection of NTFS Read with the share access available to the Sales user produces Read as the most restrictive effective permission.

Change permission is explicitly assigned only to the Marketing NTFS group; the Sales user is not a member of that group and cannot inherit Change rights through any listed group.