What should you do?
A．Grant Paul NTFS permission so that he can access any parent folder to files in the shared folder.
B．Share the Sales folder and grant Paul shared folder permission to access the shared Sales folder.
C．Remove Paul from any other group that has been explicitly denied access to the Sales folder.
D．Delete the Sales local group and recreate it. Add individual user accounts from the Sales department back into Sales local group.
参考答案
正确答案：C
解析：Explanation: The Sales group, which Paul is a member of, has permission to access the files. However, Paul still cannot access the files. It would seem that Paul has a permissions conflict. A user can be granted file permissions in a number of contexts: as a user or as a member of a user group. When a user has different file permissions in multiple contexts, the most restrictive permission is applied. Furthermore, the deny permission overrides all other permissions. As Paul does not have access to the file you must therefore assume Paul has explicitly been denied access to the file in some context, as member of one or more groups that have been denied access to the file. You would thus have to remove Paul from such a group so that the restriction is not applied to Paul.
Incorrect answers:
A: Paul has already got NTFS permission to the file, since he belongs to the Sales group. The deny permission overrides all other file permissions. You therefore need to remove Paul's user account from the groups that have been denied access to the file.
B: When a user has different file permissions in multiple contexts, the most restrictive permission is applied. Furthermore, the deny permission overrides all other permissions. As Paul does not have access to the file you must therefore assume Paul has explicitly been denied access to the file in some context, as member of one or more groups that have been denied access to the file. You would thus have to remove Paul from such a group so that the restriction is not applied to Paul.
D: The Sales group has been correctly configured and has full permissions to the files. Paul is a member of the Sales group and thus should have access to the files by virtue of his membership of that group. However, a user can be granted file permissions in a number of contexts: as user or as a member of a user group. When a user has different file permissions in multiple contexts, the most restrictive permission is applied. Furthermore, the deny permission overrides all other permissions. As Paul does not have access to the file you must therefore assume Paul has explicitly been denied access to the file in some context, as member of one or more groups that have been denied access to the file. You would thus have to remove Paul from such a group so that the restriction is not applied to Paul.