Evaluating Permission Inheritance
In this practice, you will test your knowledge of permission inheritance by evaluating the effective permissions on Windows 7 certificate, folders, and registry keys. If you are unable to answer a question, review the lesson materials and try the question again. You can find answers to the questions in the “Questions and Answers” section at the end of the chapter.
In each of the following examples, examine the list of groups that are assigned access to the secret.txt file. There are two lists: a list of ACLs that applies to folders or files, and a list of groups that user Christie Moon is a member of. The location in the file hierarchy where ACLs are assigned access is also shown in a figure for each example. The ACLs and group memberships do not change, but the location of the folders do. Examine the list of groups that Christie Moon belongs to. If Christie attempts to modify the file, will she be successful or will she receive an access denied message?
Global groups can nest in other global groups and in universal groups.Universal groups can nest in local groups, global groups, and other universal groups.
The rule you must follow here is that the closer the parent object is to the child, the higher on the evaluation list order it will be. That is, permissions on parent objects close to the child object are given more weight than those set further away.
The permissions that are applied when John attempts to access the file are called the effective permissions. You can calculate the effective permissions by using the Inheritance sort order, or you can access the Effective Permissions tab.
Processing your request, Please wait....
