Calculating Effective Permissions Manually While answering each of the following questions Assume ALL accounts on your server are members of the Users Group (including Administrators) Assume all access is remote – that is, the questions are referring to accessing the shared folder over the network, not locally Assume the permissions listed for each folder are the only permissions that exist on that folder Note: The permissions set in the slides in this power point presentation are NOT the recommended or suggested permissions, they are being used to test your abilities in calculating effective permissions. The GUI method to calculate permissions cannot be used to calculate remote permissions.

What effective permissions would a user in the Accounting Group have in the Accounting Folder? In the Marketing Folder? In the PrivateData Folder? Share Permissions: Change to Users Group NTFS Permissions: PrivateData Folder: Full Control to Administrators Group Full Control to users Group Accounting Folder: Full Control to Accounting Group Marketing Folder: Full Control to Marketing Group Answer: User would have Change Permissions to Accounting Folder. Answer: User would have No Access to the Marketing Folder. Answer: User would have Change Permissions to PrivateData Folder.

What effective permissions would a user in the Administrators group have in the PrivateData Folder? In the Accounting Folder? In the Marketing Folder? Share Permissions: Change to Users Group NTFS Permissions: PrivateData Folder: Full Control to Administrators Group Full Control to users Group Accounting Folder: Full Control to Accounting Group Marketing Folder: Full Control to Marketing Group Answer: Administrators would have Change permission to the PrivateData folder. Answer: Administrators would have No Access to the Accounting folder. Answer: Administrators would have No Access to the Marketing folder.

What effective permissions would a user in the Accounting Group have in the Accounting Folder? In the Marketing Folder? In the PrivateData Folder? Share Permissions: Full Control to Users Group NTFS Permissions: PrivateData Folder: Full Control to Administrators Group Full Control to Users Group Accounting Folder: Full Control to Accounting Group Marketing Folder: Full Control to Marketing Group Answer: Accounting User would have Full Control permission to the Accounting folder. Answer: Accounting User would have No Access to the Marketing folder. Answer: Accounting User would have Full Control permission to the PrivateData folder.

What effective permissions would a user in the Administrators group have in the PrivateData Folder? In the Accounting Folder? In the Marketing Folder? Share Permissions: Full Control to Users Group NTFS Permissions: PrivateData Folder: Read & Execute to Administrators Group Full Control to Users Group Accounting Folder: Full Control to Accounting Group Read & Execute to Administrators Group Marketing Folder: Full Control to Marketing Group Full Control to Administrators Answer: Administrators would have Full Control permission to the PrivateData folder. Answer: Administrators would have Read & Execute permission to the Accounting folder. Answer: Administrators would have Full Control Access to the Marketing folder.

What effective permissions would a user in the Users group have in the Reports? To the Monthly folder? Share Permissions: Read to Users Group NTFS Permissions: Reports Folder: Full Control to Administrators Group Write and Read & Execute to Users Group Monthly Change to Users Full Control to Administrators Answer: Users would have Read permissions to the Reports folder. Answer: Users would have Read permissions to the Monthly folder.

What effective permissions would a user in the Administrators group have in the Reports folder? In the Annual folder? Share Permissions: Full Control to Users Group NTFS Permissions: Reports Folder: Full Control to Administrators Group Read & Execute, List Folder Contents and Read to Users Group Annual Folder: Read & Execute, List Folder Contents and Read to Users Answer: Administrators would have Full Control Permission to the Reports folder. Answer: Administrators would have Read & Execute, List folder Contents & Read Permission to the Annual folder.

What effective permissions would a user in the Users group have in the Reports folder? To the Monthly folder? Share Permissions: Full Control to Users Group NTFS Permissions: Reports Folder: Full Control to Administrators Group Monthly Folder: Full Control Administrators Group Write, Read & Execute, List Folder Contents and Read to users Group Answer: Users would have No Access to the Reports folder. Answer: Users would have Write, Read & Execute, List Folder and Read permissions to the Monthly folder. Because the user has no access to the shared folder, the user will not be able to browse to this folder. Users will have to use a UNC path to get to the folder. i.e., \\servername\sharename\monthly

Share Permissions: Full Control to Administrators Group What effective permissions would a user in the Users group have to the Reports folder? To the Monthly folder? What effective permissions would a user in the Administrators group have to the Reports folder? To the Monthly folder? Share Permissions: Full Control to Administrators Group NTFS Permissions: Reports Folder: Full Control to Users Group Monthly Folder: Full Control Users Group Answer: Users would have No Access to the Reports folder. Answer: Users would have No Access to the Monthly folder. Answer: Administrators would have Full control to the Reports folder. Answer: Administrators would have Full Control to the Reports folder.

What effective permissions would a user in the Users group have in the Reports folder? To the Monthly folder? Share Permissions: Full Control to Users Group NTFS Permissions: Reports Folder: Full Control to Administrators Group Read to Users Monthly Folder: Full Control to Users Group Answer: Users would have Read permissions to the Reports folder. Answer: Users would have Full Control permissions to the Monthly folder.