MCSE技术论坛

原题如下：
QUESTION NO: 5
You work as the network administrator at TestKing.com. The
TestKing.com network consists of a single Active Directory domain named
testking.com. All servers on the TestKing.com network run Windows 2000
Advanced Server and all client computers run Windows XP Professional.
TestKing.com has its headquarters in Chicago and a branch office in Miami.
A network user named Mia Hamm stores several critical files in her My Documents
folder on a client computer named TESTKING-WS272. TESTKING-WS272 suffers
a hard disk failure and Mia Hamm's critical data is lost. Testking.com wants to
ensure that similar incidents do not lead to data loss and instructs you to backup the
user data for all TestKing.com users. To facilitate your backup strategy, you decide
that all network users will store their data in home directories on a file server
named TESTKING-SR23. You create separate home directories for each
TestKing.com user in a shared folder named HomeDirectories and move the users'
documents to their respective home directories. You grant each user the Allow -
Read permission to HomeDirectories share and the Allow - Full Control permission
to their respective home directories. Later during the day Mia Hamm complains
that she is unable to update the files in her home directory. You need to ensure that
Mia Hamm can update the files in her home directory as quickly as possible. You
also need to ensure that no user has access to any other user's home directory.
What should you do? (Choose all that apply.)
A. Assign the Creator/Owner the Allow - Full Control permission to his or her home
directory.
B. Assign the Domain Users group the Allow - Modify permission for the
HomeDirectories share.
C. Assign each user the Allow - Change permission to their respective home directories.
D. Assign the Domain Users group the Allow - Full Control permission for the
HomeDirectories share.


Answer: D Explanation: The scenario requires each user to be able to manipulate
the contents of their respective home directories. However, you granted the Read
share permission to the domain users. This means that the domain users are only
able to read the files in their folders. You should modify must be done for the users
to be in complete control of their respective home folders they have to be granted
Allow - Full Control permission to HomeDirectories shared folder.
Incorrect Answers:A: You created the home directories. Therefore you are the
Creator/Owner of the home directories.
B: Assigning the Domain Users group the Allow - Modify permission for the
HomeDirectories share will allow users access to other users home directories.
C: The Allow-Change share permission only allows read and write access. This may be
insufficient.


我想知道的是为什么说B的答案会造成资源被其他人访问？ 而D的完全控制就不会呢？

解釋有問題