CompTIA A+ Certification All-in-One Exam Guide

NTFS permissions, Deny always trumps Allow. Advanced Sharing gives you
control over what specific user accounts and groups can do with a network
share. You could grant Full Control to everyone, for example, but then add a
specific user—Bob in Accounting—and Deny Full Control to that user
account. That would effectively let everyone but Bob access to the Music
share, to add, rename, delete, and so on.
EXAM TIP Expect a question or two on the CompTIA A+ 1002 exam that
requires you to compare NTFS vs. share permissions. NTFS applies superior
local control over all resources on a computer. Share permissions only apply
to network shares (whether created using the Sharing Wizard or Advanced
Sharing). Allow vs Deny works similarly in both types of sharing, with Deny
trumping Allow.
Accessing Shared Folders with Workgroups So all this sharing seems to
work quite nicely, except for one issue: When you log on to a computer, you
access a user name and database on that computer. The account you access is
stored on the local computer; how do you give someone from another
computer access to that shared folder? You have to give that other person a
valid user name and password. We use the nomenclature <computer name>\
<user name> to track logons. If you log on to Computer A as Mike, we say
you are logged on to ComputerA\Mike. This nomenclature comes in very
handy when networked computers become part of the process.
Figure 19-31 shows Computers A and B. Assume there is a shared folder
called Timmy on Computer A and the Mike account has Read/Write
permission.