SK0-003 · Question #631
A user requests access to a new file share. The administrator adds the user to the group with the appropriate access. The user is still unable to access the share. Which of the following actions…
The correct answer is A. Request the user to logoff and log back on. When a user's group membership is changed to grant new permissions, they must log off and log back on for their access token to refresh and recognize the new group associations.
Question
A user requests access to a new file share. The administrator adds the user to the group with the appropriate access. The user is still unable to access the share. Which of the following actions should the administrator do to resolve the permissions issue?
Options
- ARequest the user to logoff and log back on.
- BAdd the user as an administrator on their local machine.
- CAdd the user as an administrator on the server.
- DRun an ipconfig /renew on the user's machine.
How the community answered
(48 responses)- A85% (41)
- B4% (2)
- C8% (4)
- D2% (1)
Why each option
When a user's group membership is changed to grant new permissions, they must log off and log back on for their access token to refresh and recognize the new group associations.
When a user's group membership is modified, their security token, which contains their group affiliations and associated permissions, is only updated upon a new login session. Requesting the user to log off and log back on ensures their access token is refreshed, allowing the newly assigned permissions to take effect.
Running ipconfig /renew renews the client's IP address lease from the DHCP server and has no bearing on file share permissions or group membership.
Concept tested: User access token refresh
Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/access-tokens
Topics
Community Discussion
No community discussion yet for this question.