8-5Lesson 1 Introduction to NTFS PermissionsGroup B NTFS volumeFolder AWriteR/WFile 1User1ReadFile 2Group ADeny Write to File2• NTFS permissions are cumulative.• File permissions override folder permissions.• Deny overrides other permissions.
F08us01
Figure 8-1
You must be able to calculate effective NTFS permissions.
The user can read and write to File1. The user can also read File2, but cannot write to
File2 because she is a member of Group A, which has been denied Write permission
for File2.
How NTFS Permissions Inheritance Is Controlled
By default, permissions that you assign to the parent folder are inherited by and prop-
agated to the subfolders and files contained in the parent folder. However, you can
prevent permissions inheritance, as shown in Figure 8-2.
NTFS volumeFile AAccess to FileAInherit permissionsNo access to FileAPrevent inheritance
F08us02
Figure 8-2
Files and folders inherit permissions from their parent folder.
By default, whatever permissions you assign to the parent folder also apply to subfolders
and files contained within the parent folder. When you assign NTFS permissions to give
access to a folder, you assign permissions for the folder and for any existing files and sub-
folders, as well as for any new files and subfolders that are created in the folder.
You can prevent permissions that are assigned to a parent folder from being inherited
by subfolders and files that are contained within the folder. That is, you can change the
default inheritance behavior and cause subfolders and files to not inherit permissions
that have been assigned to the parent folder containing them.
The folder for which you prevent permissions inheritance becomes the new parent
folder. The subfolders and files contained within this new parent folder inherit the per-
missions assigned to it.
Lesson Review
Use the following questions to help determine whether you have learned enough to
move on to the next lesson. If you have difficulty answering these questions, review
the material in this lesson before beginning the next lesson. You can find answers to
these questions in the “Questions and Answers” section at the end of this chapter.
