Skip to main content

Preview build: sign-in and grading run on the server. MFA is not enabled, and storage is in server memory so it does not survive a restart.

LearnDefend
Browser LabLD-WINAD-LAB-001Medium
Browser LabLD-WINAD-LAB-001Medium26 min

Who Can Read the Salaries?

Aldar's HR keeps confidential salary files on the share \\FS-01\HR. A review asks you to work out, from the ACL and group memberships alone, exactly who can reach that data and to find any over-broad grant. Claim only what the permissions actually show — access can arrive through a group, and an explicit Deny can override an Allow.

What you will be able to do

  • Compute a user's effective NTFS access from the ACL and their groups.
  • Find an over-broad access-control entry exposing sensitive data.
  • Apply an explicit Deny correctly and recommend a least-privilege fix.
Windows SecurityIncident Triage

Sign in to start this lab.

Sign in