A server administrator is unable to access files on a recently created network share from client machines, even though the share is configured correctly on the Windows server and local access works. When attempting to access the share, clients receive an 'Access Denied' error. The administrator has verified that the NTFS permissions on the folder are correctly set for the users. What is the MOST likely missing configuration?
- AThe share permissions for the network share are not correctly set.
- BThe client machines have outdated network drivers.
- CThe server's DNS client configuration is incorrect.
- DThe server's default gateway is misconfigured.
Show answer & explanationAnswer & explanation
Correct answer: A. The share permissions for the network share are not correctly set.
When local access works but network access fails with 'Access Denied', and NTFS permissions are verified, the problem almost always lies with the share permissions. Both share permissions and NTFS permissions must allow access; the most restrictive permission takes precedence. If NTFS is fine, share permissions are the next logical place to check.
Why the other options are wrong
- B. Outdated client network drivers might cause connectivity issues, but not specifically an 'Access Denied' error related to share access once a connection is established.
- C. Incorrect DNS client configuration would lead to hostname resolution issues, not an 'Access Denied' error once the server is reached.
- D. A misconfigured default gateway would prevent any network access, including the ability to even attempt to connect to the share.
Share vs. NTFS Permissions
In Windows, network share access requires both Share permissions (controlling who can connect to the share itself) and NTFS permissions (controlling what they can do with files/folders within the share). The most restrictive permission applies.
- Share permissions are applied first when accessing over the network.
- NTFS permissions are applied second and control granular file/folder access.
- Local access only uses NTFS permissions.
- Troubleshooting 'Access Denied' for network shares requires checking both sets of permissions.
Memory trick: Share Permissions are the 'Gatekeeper', NTFS are the 'Room Keys'!