单选题

You upgraded a computer to Windows 2000 Professional and kept the FAT32 file system. You want each of three employees who use this computer to have their own documents area that no one else can access. You create a shared folder for each of the three users. You give only the owner permission to use the folder. Later in the week you are informed that User1’s folder was modified while User1 was on vacation. What is wrong with your security configuration？ （）

A Local computer policy must restrict the rights of the three users.

B You gave each share the same name under the users’ Documents and Settings folders.

C Shared folder security only works when accessing the folder over the network.

D Domain authentication should be required at log on.

解析： Choice “Shared folder security only works when accessing the folder over the network” is correct. The most appropriate reason is that share level permissions do not restrict the user to modify the folders locally. You should convert your file system from FAT32 to NTFS to apply the local file and folder level security. 
Local security policy is used to define the different rights assignment to user or computers not the permissions to the files or folders. 
It is not possible to define the same name for files or folders within the same volume or partition. DACL entries are used to define the permissions not the domain authentication.