Share Boundary
SMB permissions
SMB PERMISSIONS
SMB share permissions and filesystem ACLs both affect access. Broad write permissions can expose shared files to accidental or malicious modification.
LEARNING GOAL
Identify the misconfiguration in the synthetic evidence and explain a defensive correction.
EVIDENCE
Share: \\ghost-files\\training Share ACL: Everyone=Change NTFS ACL: Everyone=Modify Expected: Training-Editors=Modify; Everyone=Read review_marker=shares_need_boundaries
HINT
Compare Everyone's current access with the expected policy.
KNOWLEDGE CHECK
Which group has more access than intended?
Compare Everyone's current access with the expected policy.
Submit the review marker in SG{marker} format.
Progress stays in this browser.
DEFENSIVE TAKEAWAY
Apply least privilege at both share and filesystem layers and test effective permissions.