What is the best practice for managing folder security?

What is the best practice for managing folder security?

• A. Disable folder security
• B. Assign access using Groups.
• C. Delete unused groups
• D. Use per-user explicit permissions

Answer: (B)

Assigning access using Groups is the most scalable and maintainable way to manage folder security. By tying permissions to groups, you reflect organizational roles or teams rather than individuals. When someone changes roles or leaves, you just adjust group membership and access updates everywhere automatically. This approach keeps permissions consistent, simplifies audits, and reduces the risk of privilege drift because changes are made in one place rather than on many individual accounts. Disabling folder security would remove protection entirely, which isn’t acceptable. Deleting unused groups doesn’t directly govern access and can break consistency or future access needs. Using explicit permissions for each user is a tedious, error-prone, and hard-to-scale method that makes it easy to lose track of who really should have access.

Assigning access using Groups is the most scalable and maintainable way to manage folder security. By tying permissions to groups, you reflect organizational roles or teams rather than individuals. When someone changes roles or leaves, you just adjust group membership and access updates everywhere automatically. This approach keeps permissions consistent, simplifies audits, and reduces the risk of privilege drift because changes are made in one place rather than on many individual accounts.

Disabling folder security would remove protection entirely, which isn’t acceptable. Deleting unused groups doesn’t directly govern access and can break consistency or future access needs. Using explicit permissions for each user is a tedious, error-prone, and hard-to-scale method that makes it easy to lose track of who really should have access.