nerdexam
CompTIA

SK0-003 · Question #472

An administrator creates a new directory then shares it on the Windows server. The administrator sets the permissions for everyone to "Modify" but users report they are unable to create or delete…

The correct answer is A. The administrator forgot to change the share permissions. The users cannot create or delete documents because the Share permissions likely remained at a more restrictive default setting, which takes precedence over the more permissive NTFS 'Modify' permissions.

Server administration

Question

An administrator creates a new directory then shares it on the Windows server. The administrator sets the permissions for everyone to "Modify" but users report they are unable to create or delete documents. Which of the following is the cause?

Options

  • AThe administrator forgot to change the share permissions
  • BThe users were not part of the "Everyone" built in group
  • CThe administrator shared the files but not the folder
  • D"Modify" only allows users to change existing documents

How the community answered

(26 responses)
  • A
    81% (21)
  • B
    4% (1)
  • C
    4% (1)
  • D
    12% (3)

Why each option

The users cannot create or delete documents because the Share permissions likely remained at a more restrictive default setting, which takes precedence over the more permissive NTFS 'Modify' permissions.

AThe administrator forgot to change the share permissionsCorrect

In Windows, effective permissions for network shares are determined by the most restrictive combination of NTFS permissions and Share permissions. If the administrator only changed the NTFS permissions to 'Modify' but left the Share permissions at a default of 'Read' for 'Everyone', users would be restricted to read-only access, preventing them from creating or deleting files.

BThe users were not part of the "Everyone" built in group

If the administrator set NTFS permissions for 'Everyone,' and users are reporting issues, it implies they are part of 'Everyone' for NTFS purposes, but share permissions still override in network access scenarios.

CThe administrator shared the files but not the folder

The question states the administrator 'shared it on the Windows server,' which implies sharing the directory or folder, not just individual files, so this is not the cause of the issue.

D"Modify" only allows users to change existing documents

The 'Modify' NTFS permission explicitly grants users the ability to create, write, delete, and change attributes of files and folders, in addition to changing existing documents.

Concept tested: Windows Share vs. NTFS permissions

Source: https://learn.microsoft.com/en-us/windows/win32/fsrm/share-and-ntfs-permissions

Topics

#Windows server permissions#NTFS permissions#share permissions#file system security

Community Discussion

No community discussion yet for this question.

Full SK0-003 Practice