NTFS permission rejection is preferred

Experiment 4: deny first

Lab Objectives

Create user a and add them to zu1 and zu2 respectively. Assign the zu1 read permission to E: \ 2.txt. zu2 rejects the read permission and verifies the final permission of user.

Lab Environment

Omitted

Lab procedure

1. create user A and Group zu1 and zu2 and add user a to zu1 and zu2. The steps are the same as above.

Right-click User A-properties-affiliated-add-input Object Name-OK-OK

2. Assign read permission to group zu1 for E: \ 2.txt respectively, and zu2 reject read permission

Assign read permission to zu1:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/45/4C/wKioL1Pm3NqTvGwfAAFeTB0Ojak086.jpg "Title =" 1.png" alt = "wkiol1pm3nqtvgwfaafetb0ojak086.jpg"/>

 

For zu2, the read permission is denied:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/4C/wKioL1Pm3VTy4kHxAAFwJUQ-Rls852.jpg "Title =" 2.png" alt = "wKioL1Pm3VTy4kHxAAFwJUQ-Rls852.jpg"/>

 

1. Open 2.txt For Login User ATO view Permissions

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/4C/wKiom1Pm3EPSEDwXAAD6ywXZCrI291.jpg "Title =" 3.png" alt = "wkiom1pm3epsedwxaad6ywxzcri291.jpg"/>

 

Result Verification

User A has no read permission for 2.txt.

 

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/4C/wKiom1Pm3SbAf6hjAAD6ywXZCrI716.jpg "Title =" 4.png" alt = "wkiom1pm3sbf6hjaad6ywxzcri716.jpg"/>

Problem and Experience Summary

This article is from the "fwlnsd1407" blog. For more information, contact the author!