Permissions on C:\WINNT

From: Mick Smith (Mick.D.Smith777@btopenworld.com)
Date: 05/29/02 

From: "Mick Smith" <Mick.D.Smith777@btopenworld.com>
Date: Wed, 29 May 2002 15:44:59 +0100

Following a security review it was reported that our NT 4 servers have the
Everybody, Full Control permissions set on C:\WINNT. This was considered as
a security risk even though users cannot connect to this admin share.

The servers were built with a standard install, hence, these permissions
were set by the OS at install time?? Are these permissions correct? If
not, what should they be?

\SYSTEM32 and \SYSTEM under this directory are set as Everybody Change
<RWXD>

Thanks in advance.
Mick.

Relevant Pages

  • Permissions on C:WINNT
    ... Following a security review it was reported that our NT 4 servers have the ... The servers were built with a standard install, hence, these permissions ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Permissions on C:WINNT
    ... > Following a security review it was reported that our NT 4 servers have the ... > The servers were built with a standard install, hence, these permissions ... > were set by the OS at install time?? ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Permissions on C:WINNT
    ... > Following a security review it was reported that our NT 4 servers have the ... > The servers were built with a standard install, hence, these permissions ... > were set by the OS at install time?? ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Error "The system cannot find the file specified" on files
    ... I will see if my customer can do this for me as I cannot easily get physical ... both of these servers are domain controllers. ... command line utilities and GUI tools, tried to set permissions. ... Security tab in Windows Explorer doesn't appear. ...
    (microsoft.public.windows.file_system)
  • Re: Cant Mount Public Store
    ... Edit to the Exchange Domain Servers group to the servers that own the public ... This sounds like a permissions problem. ...
    (microsoft.public.exchange.setup)