I have created an shared NTFS Partition.  Both Bo and Luke are members
of the Marketing Team.  This team has been given the NTFS Modify
Permission on the said folder.  Bo has been given NTFS Read permission
on the folder and Luke has been given NTFS Full Permission.  The
folder is shared with share permission Full to the Everyone group and
Share permission Modify to the Marketing group.  Now, What are Bo and
Luke's effective permission when connecting to the folder over a
network?

---

Request for Question Clarification by sublime1-ga on 06 Jan 2006 16:20 PST

Unless I'm missing something, Bo and Luke's membership
in Everyone will give they Full Permission, overriding
their limited membership in the Marketing group.

That is what I thought, but i figured i would ask the community and
see if lower level permissions trumph more global permissions.

Share permissions are handled first. The users are in both the
"Marketing" group and the "Everyone" group. As long as neither group
has a "Deny" permission, they will receive the least restrictive
permissions. Therefore, they will have "Full Access" to the share from
the "Everyone" group.

However, the NTFS permissions supercede the Share permissions on the
individual files and folders. Again as long as none of the permissions
have a "Deny", they will receive the least restrictive permissions.
Luke's effective permissions will be "Full Access" based on his user's
NTFS permissions, while Bo will only have "Modify" permissions based
on the "Marketing" group's NTFS permissions.