Microsoft Server 2003 Question regarding Folder Permissions



Hello,

I am studying for the first 70-290 MCSA exam. I have a questions
regarding folder permissions and I don't understand why one of the
answers is correct on the following question. Can someone explain why
in the following questions the answer "Only permanent employees can
delete files from the progress folder" is correct? I believe that
initially AdCampaign group is given Modify permission however this does
not include "delete subfolders and files" permission.

My question is what compilation of permission allows "only" permanent
employees to delete files in the progress folder.

Any insight is appreciated. Thanks

Here is the question:

Managing and Maintaining a Microsoft Windows Server 2003 Environment
Question Number (ID) : 28 (rrMSP_MngActRes-080)
____________________________________________________________________________________________________________________
A group of temporary employees has been hired by the Marketing
department to ramp up for an
advertising campaign. The employees have Active Directory accounts that
have been added to the Temps
domain global group. The Temps domain global group has been added to
the AdCampaign domain local
group. The Marketing domain global group is also a member of the
AdCampaign group.

The AdCampaign group has been granted Modify permission on the
PrintMaterials folder. The
PrintMaterials folder has three subfolders: Final, Review, and
Progress.
The VP of Marketing is concerned that files might be accidentally
placed in the wrong folders,
deleted, or modified after they have been approved. She states that
just yesterday, she found a file
that had not been edited in the Final folder.

She has outlined the following access requirements:

Both permanent and temporary employees should be able to add files to
the Progress folder.
Both permanent and temporary employees should be able to change files
in the Progress folder.
Both permanent and temporary employees should be able to add files to
the Review folder.
No employees can delete files from the Final folder.
No employees can delete files from the Review folder.
Only permanent employees can delete files from the Progress folder.
Only permanent employees should be able to add files to the Final
folder.
Only permanent employees should be able to change files in the Review
folder.

You add the following special permissions to the Progress folder and
select to apply the permission
to all subfolders and files:
Allow AdCampaign Create Files / Write Data
Allow AdCampaign Create Folders/ Append Data

You add the following special permissions to the Review folder and
select to apply the permission to
all subfolders and files:
Allow AdCampaign Create Files / Write Data
Allow Marketing Create Folders/ Append Data

You add the following special permissions to the Final folder and
select to apply the permission to
all subfolders and files:
Allow Marketing Create Files / Write Data
Allow Marketing Create Folders/ Append Data

Which of the requirements are met by your solution?
1. >>Both permanent and temporary employees can add files to the
Progress folder. <Correct>
2. No employees can delete files from the Review folder. <Correct>
3. Only permanent employees can add files to the Final folder.
4. Only permanent employees can change files in the Review folder.
5. Only permanent employees can delete files from the Progress folder.
<Correct>
6. No employees can delete files from the Final folder. <Correct>
7. Both permanent and temporary employees can add files to the Review
folder. <Correct>
8. Both permanent and temporary employees can change files in the
Progress folder. <Correct>

Explanation :

The parent folder has the Modify permission assigned to the AdCampaign
group. By default, these
permissions will propagate to the child folders and files. Therefore,
even without the explicit
permissions, both temporary and permanent employees will be able to add
files to the Progress folder.

The Modify permission includes the ability to change existing files, so
both permanent and temporary
employees will be able to change files in the Progress folder.

The Modify permission will also propagate to the Review folder, so both
temporary and permanent
employees can change files in the Progress folder.

The Modify permission does not include the Delete Subfolders and Files
permission, so no employees
can delete files from the Final folder.

The Modify permission does not include the Delete Subfolders and Files
permission, so no employees can delete files from the Review folder.

The Modify permission does not include the Delete Subfolders and Files
permission, so permanent
employees cannot delete files form the Progress folder.

The inherited Modify permission allows all members of AdCampaign,
including those in Temps, to add
files to the Final folder.

The inherited Modify permission allows all members of AdCampaign,
including those in Temps, to
change files in the Review folder.

.



Relevant Pages

  • Re: Network shares cannot connect
    ... Changed value to 0 just waiting to re-boot the server and test logins. ... Workstation Name: - ... let's focus on the Users Shared Folder first. ... To check this permission, please click the Advanced button, select ...
    (microsoft.public.windows.server.sbs)
  • Re: Network shares cannot connect
    ... Changed value to 0 just waiting to re-boot the server and test logins. ... Workstation Name: - ... let's focus on the Users Shared Folder first. ... To check this permission, please click the Advanced button, select ...
    (microsoft.public.windows.server.sbs)
  • MCSA/MCSE Self-training book from MS PRESS for exam 70-215 incorrect on file permission questions?
    ... includes the AccountingDept folder, which contains documents specific to the ... accounting department. ... The Accounting group includes all members of the ... AccountingDept folder by granting Read permission to the Accounting group ...
    (microsoft.public.win2000.file_system)
  • Re: Network shares cannot connect
    ... User Name: SERVER$ ... Regarding the shares accessing problem, I suggest you try following steps ... let's focus on the Users Shared Folder first. ... To check this permission, please click the Advanced button, select ...
    (microsoft.public.windows.server.sbs)
  • Re: Practice Test with Wrong Answers?
    ... "The Modify permission does not include the Delete Subfolders and Files ... so permanent employees cannot delete files form the Progress ... When I try this out the modify permissions for the parent folder get ...
    (microsoft.public.cert.exam.mcsa)