🚀 go-pugleaf

This question is on the transcender is confusing me. I thought that when

a user is accessing a share over the network the most restrictive set of

permissions apply.
In the case below why does Nancy get the least restrictive permissions
even though she is accessing the share over the network?
Can someone explain this better??



===============================================
24. Jack has an account on a Windows NT Workstation machine that
contains a folder called \ShareMe. The folder resides on an NTFS
partition on Jack's machine. Nancy wants to access the \ShareMe folder
on Jack's machine remotely from her own Windows NT Workstation computer.

Both Jack and Nancy belong to the following user groups in the domain
that have these permissions for the \ShareMe folder:

GROUP NAME     SHARE PERMISSIONS     NTFS PERMISSIONS
Developers             Change                                    Add
(WX) (Not Specified)
Managers               Change                                     Read
(RX) (RX)
Everyone                Read                                        List
(RX) (Not Specified)
Users                     Read
List (RX) (Not Specified)

What are Jack and Nancy's effective permissions for the \ShareMe folder?

a. Jack: List permission                   Nancy: Read permission
b. Jack: Add permission                  Nancy: Read permission
c. Jack: Add permission                  Nancy: Add permission
d. Jack: Add and Read  permission  Nancy: Change permission
e. Jack: Add and Read  permission   Nancy: Add and Read permission


Choice e is correct. When logging on locally, a user's level of access
for a folder is determined by his least restrictive level of access.
This is the level of permission a user has for accessing an NTFS folder
locally. In the above question, Jack's access levels for the four groups

he belongs to are: Add, Read, List and List. The least restrictive level

of these is Add and Read permissions. The least restrictive of Nancy's
four share permissions is Change permission. Since the NTFS permissions
on the workstation also apply to her user account, the most restrictive
permission is determined by combining her effective share permission
(Change) with her effective NTFS permission (Add and Read). Her
effective NTFS permission is the same as it is for Jack. This is Add and

Read permission. When No Access permission is combined with any other
permission, an access level of No Access is always the result.
NTCP, pp. 129-131; WSRK, Chapter 18, Comparing FAT and NTFS File
Systems, p. 615.
==============================================

Remove NOSPAM from my E-mail address to reply!

Thanks,
Mark