folder security rights

From: scooter (dogfood17_at_hotmail.com)
Date: 08/23/03 

Date: Sat, 23 Aug 2003 04:45:36 -0700

we are just moving to a domain network, what is the best
policy for assigning security rights to files and folders,
should I delete the everyone group and give access
to "domain users" or a custom group called "staff" etc,
also we have 4 users that should have admin rights, should
we use "administrator" as the main user or add each user
to "Domain Admins" group and get them to log into servers
as themselves so the changes can be monitored-but wont
this create multiple profiles on the servers?-whats best?
we run Windows 2000 servers.

Thanks for your help

Quantcast