Evaluating Permission Inheritance

By Author: Shirley Green
Total Articles: 129
Comment this article

In this practice, you will test your knowledge of permission inheritance by evaluating the effective permissions on Windows 7 certificate, folders, and registry keys. If you are unable to answer a question, review the lesson materials and try the question again. You can find answers to the questions in the "Questions and Answers" section at the end of the chapter.
In each of the following examples, examine the list of groups that are assigned access to the secret.txt file. There are two lists: a list of ACLs that applies to folders or files, and a list of groups that user Christie Moon is a member of. The location in the file hierarchy where ACLs are assigned access is also shown in a figure for each example. The ACLs and group memberships do not change, but the location of the folders do. Examine the list of groups that Christie Moon belongs to. If Christie attempts to modify the file, will she be successful or will she receive an access denied message?
The previous example shows the nesting rules that are followed in a free CIW exam questions ...
... mixed functional level domain: global groups can be nested in local groups. In a Win-dows 2000 native functional level domain or Windows Server 2003 functional level domain, additional nesting rules apply:
Domain local groups can nest in domain local groups from their own domain.
Global groups can nest in other global groups and in universal groups.Universal groups can nest in local groups, global groups, and other universal groups.
The rule you must follow here is that the closer the parent object is to the child, the higher on the evaluation list order it will be. That is, permissions on parent objects close to the child object are given more weight than those set further away.

The permissions that are applied when John attempts to access the file are called the effective permissions. You can calculate the effective permissions by using the Inheritance sort order, or you can access the Effective Permissions tab. This tab can be accessed from the Security tab of the object, by clicking the Advanced button, and then selecting the free A+ exam questions Effective Permissions tab. Figure 9-10 displays the tab for the history.doc file for Kevin Browne.