What permission are effective when a user attempts to access a shared folder over the network

This chapter is from the book 

Practice Questions

Question 1

Greggory has just installed Windows XP Professional on a new computer that is a member of a workgroup named Sales. When he goes to create a network shared folder by right-clicking a folder and selecting Sharing And Security, the Properties dialog box for the folder displays only four tabs: General, Sharing, Web Sharing, and Customize. The Sharing tab is divided into two sections: Local Sharing, and Network Sharing And Security. No Security tab exists for NTFS permissions, nor does any way exist to set Share permissions. Even when Greggory right-clicks a folder and selects Properties, he still gets the same tabbed dialog box with the same four tabs. The folder resides on an NTFS drive volume. How can Greggory fix this problem?

1. Go to Control Panel|Administrative Tools|Local Security Policy and enable the policy for Network Access: Sharing And Security Model For Local Accounts.

2. Open My Computer or Windows Explorer, click Tools|Folder Options, click the View tab, and clear the checkbox for Use Simple File Sharing.

3. Open the Computer Management Console, expand Services And Applications, and click the Services node. Right-click the Workstation service and select Start. Double-click the Workstation service and set the Startup Type to Automatic.

4. Open Control Panel and double-click Network Connections. Right-click the Local Area Connection and select Properties. Mark the checkbox for File And Printer Sharing For Microsoft Networks and click OK.

Answer b is correct. Simple File Sharing is enabled by default for stand-alone and workgroup-member computers. Simple File Sharing is disabled by default for domain-member computers. The Folder Options menu is the only way to enable or disable Simple File Sharing. Answer a is incorrect because the policy for Network Access: Sharing And Security Model For Local Accounts does not deal with Simple File Sharing. Answer c is incorrect because the Workstation service is enabled by default. Answer d is incorrect because File And Printer Sharing For Microsoft Networks is enabled by default.

Question 2

Which of the following methods enable you to create shared network folders? [Check all correct answers]

1. Right-click a folder in either My Computer or Windows Explorer, select Sharing And Security, click the option button Share This Folder, and click OK.

2. Right-click a folder in either My Computer or Windows Explorer, select Properties, click the Sharing tab, click the option button Share This Folder, and click OK.

3. Open the Computer Management Console, expand Shared Folders, right-click the Shares node, and click New File Share. Follow the on-screen instructions for the Create Shared Folder Wizard.

4. Open a command prompt window. Type "Net Share share_name=x:\folder_name", where share_name represents the name you want to assign to the shared folder, x: represents the drive letter where the folder resides, and folder_name represents the actual name of the folder.

Answers a, b, c, and d are all correct. All of these methods are valid ways to create shared network folders.

Question 3

What is the default setting for offline files under Windows XP Professional when acting as a "server" for other client computers?

1. Manual caching of documents.

2. Automatic caching of documents.

3. Caching is disabled.

4. Automatic caching of programs and documents.

Answer a is correct because manual caching of documents is the default setting for Windows XP Professional. Answer b is incorrect because automatic caching of documents is not the default setting; however, it is an option. Answer c is incorrect because the caching of offline files is enabled by default. Answer d is incorrect because automatic caching of programs and documents is not the default setting; however, it is an option.

Question 4

Which of the following Local groups are installed automatically by Windows XP Professional? [Check all correct answers]

1. Network Configuration Operators

2. Replicator

3. Authenticated Users

4. HelpServicesGroup

5. Remote Desktop Users

6. Creator Group

Answers a, b, d, and e are all correct. Answer c is incorrect because Authenticated Users is considered to be a built-in security principal, not a Local group. Answer f is incorrect because Creator Group is also considered to be a built-in security principal, not a Local group.

Question 5

How can you determine the actual, effective NTFS permissions on a file or a folder for a user or a group with the least amount of administrative effort?

1. Log on as the specific user and test the user's permissions by attempting to read, write, modify, delete, change permissions, and take ownership of specific files and folders.

2. Log on as an administrative user, right-click a folder or file in question, choose Properties, click Security, click the Advanced button, and click the Effective Permissions tab. Select a user or group to view the effective permissions for that user or group on the specific file or folder.

3. Open the Computer Management Console, click Shared Folders, and then click Effective Permissions.

4. Open the Control Panel and double-click Component Services. Right-click the NTFS Permissions node and select Effective Permissions.

Answer b is correct. The Effective Permissions tab is a new feature in Windows XP Professional. Answer a is incorrect because it requires more administrative effort than using the Effective Permissions tab. Answer c is incorrect because no Effective Permissions tab exists for the Shared Folders snap-in. Answer d is incorrect because no Effective Permissions feature exists in the Component Services snap-in.

Question 6

If you use Windows Explorer to move seven subfolders containing 152 files from e:\docs to e:\letters on Server3, what will happen to their NTFS permissions?

1. The folders and files moved will retain their same NTFS permissions.

2. The folders and files moved will inherit their NTFS permissions from the target (destination) folder.

3. The folders and files moved will have their NTFS permissions reset to the default settings for drive volumes, such as Allow Everyone Read and Execute, and Administrators Full Control.

4. You will be prompted by a message box asking whether you want the folders and files moved to retain their permissions, or if you want them to inherit their permissions from the target (destination) folder.

Answer a is correct. Folders and files that are moved within the same NTFS drive volume always retain their permissions from the source folder. Answer b is incorrect because folders and files moved to a different NTFS drive volume inherit their permissions from the target (destination) folder. Answer c is incorrect because folders and files that are moved never have their NTFS permissions reset to drive volume defaults. Answer d is incorrect because Windows Explorer does not prompt the user about retaining or inheriting NTFS permissions when moving or copying files.

Question 7

As a network administrator, how can you ensure that members of the Interns group are allowed only to print documents on Printer4, and that they can print only those documents during nonbusiness hours. In addition, how can you make sure that their print jobs have a higher priority than other print jobs from members of other groups?

1. Configure the printer properties for Printer4 on each computer for each member of all the other network groups. In the Printers And Faxes window, right-click Printer4, select Properties, click the Advanced tab, click the Available From button, and specify the business hours that the printer will be unavailable for the Interns group. Decrement the Priority counter so that each member of the other groups will have a lower printing priority for Printer4 than members from the Interns groups.

2. For each user in the Interns group, open the Printers And Faxes window, right-click Printer4, select Properties, and click the Security tab. Grant the permissions Allow Print, Allow Manage Printers, and Allow Manage Documents to the Interns group.

3. Configure the printer properties for Printer4 on each computer for each member of the Interns group. In the Printers And Faxes window, right-click Printer4, select Properties, click the Advanced tab, click the Available From button, and specify the nonbusiness hours that the printer will be available. Increment the Priority counter so that each member of the Interns group will have a higher printing priority for Printer4 than members from other groups.

4. For each user in the Interns group, open the Printers And Faxes window, right-click Printer4, select Properties, and click the Security tab. Click the Advanced button, click the Owner tab, and change the owner to the Interns group.

Answer c is correct. If you set up each computer for each user who belongs to the Interns group, you can specify during which time period the printer is available, and you can specify a higher priority than the default, which is 1. Answer a is incorrect because you do not need to configure computers for the users in groups other than the Interns group, and you cannot specify a priority setting lower than 1 (the default). Answer b is incorrect because printer permissions do not modify printer availability or printer priority settings. Answer d is incorrect because the printer ownership setting does not modify printer availability or printer priority settings.

Question 8

Which of the following statements are true about using the Internet Printing Protocol (IPP)? [Check all correct answers]

1. The print server computer must be running IIS 4 or later.

2. The print server computer may be running Windows 2000 Professional.

3. You can view all available printers and faxes by typing the following URL into a Web browser: "http://print_server_name/printers".

4. You can connect to specific printer by typing the following URL into a Web browser: "http://print_server_name/printer_share_name".

Answers b and d are correct. IPP is supported on Windows 2000 (all editions) and later Microsoft operating systems. You can connect directly to printer by typing the URL "http://print_server_name/printer_share_name" into a Web browser. Answer a is incorrect because a print server computer must be running IIS 5 or later to support IPP. Answer c is incorrect because IPP displays only print devices, not fax devices. However, the URL is correct.

What are the permission options for shared folders?

What is effective access permissions?

What permission is used to provide network files?

What is NTFS permission on folder?