Technical data

JSC 36381 MARCH 30, 2000
Baseline
4-4
describe the permissions that may be assigned to Windows NT directories and files.
Determining the effective NTFS permissions for any network resource may be
complicated by a combination of rights assigned to groups and specific individuals.
The following three rules can help predict the effective access permission to a network
resource:
1) Inheritance
Permissions granted to container objects, such as file folders, are inherited
in any down-line resource. Therefore, newly created subfolders
automatically assume the permissions assigned to its parent folder.
Likewise, new files automatically assume the explicit and implicit
permissions granted to the folder in which they reside.
2) Explicit Permissions
An explicit permission granted in a container object’s Access Control List
(ACL) overrides inherited permission for the same user or group
3) Multiple Sources
If a user gains permissions from more than one source, such as belonging
to more than one group with permissions for the same directory, the
user’s permissions are cumulative unless one of the permissions is No
Access.