nerdexam
CompTIA

SK0-003 · Question #863

A user is unable to open a shared folder on a server and is receiving an access denied message. The system administrator verifies that the user has been granted read NTFS permissions on the folder. Wh

The correct answer is C. Change the share permissions on the folder.. Even with sufficient NTFS permissions, a user can be denied access to a shared folder if share permissions are more restrictive. The administrator must adjust the share permissions to allow the user appropriate access.

Troubleshooting

Question

A user is unable to open a shared folder on a server and is receiving an access denied message. The system administrator verifies that the user has been granted read NTFS permissions on the folder. Which of the following should the administrator do to resolve the issue?

Options

  • ASet the NTFS write permissions on the folder.
  • BEnsure that the folder's permissions are inherited.
  • CChange the share permissions on the folder.
  • DBlock inheritance on the folder's permissions.

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    16% (5)
  • C
    75% (24)
  • D
    6% (2)

Why each option

Even with sufficient NTFS permissions, a user can be denied access to a shared folder if share permissions are more restrictive. The administrator must adjust the share permissions to allow the user appropriate access.

ASet the NTFS write permissions on the folder.

Setting NTFS write permissions is unnecessary if the user only needs to open the folder (read access), and it does not address the share permission issue.

BEnsure that the folder's permissions are inherited.

Ensuring inheritance is not the primary issue; the explicit NTFS read permission is confirmed, indicating the problem lies elsewhere, likely with share permissions.

CChange the share permissions on the folder.Correct

When accessing a shared folder, both NTFS permissions and share permissions apply, and the most restrictive combination takes precedence. Since the user has read NTFS permissions but is still denied access, the share permissions are likely too restrictive and need to be changed to allow at least read access.

DBlock inheritance on the folder's permissions.

Blocking inheritance would potentially make permissions more restrictive or complex, not resolve an "access denied" issue when read NTFS is already granted.

Concept tested: NTFS vs. Share Permissions interaction

Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/share-and-ntfs-permissions

Topics

#NTFS permissions#Share permissions#Access control#Troubleshooting access

Community Discussion

No community discussion yet for this question.

Full SK0-003 Practice