Browser LabLD-WINAD-LAB-001Medium
Browser LabLD-WINAD-LAB-001Medium26 min
Who Can Read the Salaries?
Aldar's HR keeps confidential salary files on the share \\FS-01\HR. A review asks you to work out, from the ACL and group memberships alone, exactly who can reach that data and to find any over-broad grant. Claim only what the permissions actually show — access can arrive through a group, and an explicit Deny can override an Allow.
What you will be able to do
- Compute a user's effective NTFS access from the ACL and their groups.
- Find an over-broad access-control entry exposing sensitive data.
- Apply an explicit Deny correctly and recommend a least-privilege fix.
Windows SecurityIncident Triage
Sign in to start this lab.
Sign in