Re: folder security rights

From: Herb Martin (news_at_LearnQuick.com)
Date: 08/23/03 

Date: Sat, 23 Aug 2003 15:34:55 -0500

"scooter" <dogfood17@hotmail.com> wrote in message
news:077601c3696c$11467340$a401280a@phx.gbl...
> we are just moving to a domain network, what is the best
> policy for assigning security rights to files and folders,
> should I delete the everyone group and give access
> to "domain users" or a custom group called "staff" etc,

General rules: Get rid of everyone group wherever possible.
At least substitute "Authenticated Users" etc.

Use SPECIFIC Groups instead.

Put the CORRECT permissions for defaults on each directory;
put the CORRECT permissions for each file on each existing
file -- in a secure system, individual files should frequently have
different permissions than the parent folder.

> also we have 4 users that should have admin rights, should
> we use "administrator" as the main user or add each user
> to "Domain Admins" group and get them to log into servers
> as themselves so the changes can be monitored-but wont
> this create multiple profiles on the servers?-whats best?
> we run Windows 2000 servers.

Use the more specific groups and more restrictive permissions
whenever possible.

> Thanks for your help

Relevant Pages

  • Re: ASP.Net Security Problems.
    ... the webroot is on ... That would lead me to believe that the OS folders that you mentioned have ... the correct permissions?? ... >>I've been able to narrow it down to a security problem ...
    (microsoft.public.win2000.security)
  • script to create home folder, assign correct permissions and map to it
    ... But In order to map to the drives, ... to manually create these folders and set the correct permissions, ...
    (microsoft.public.scripting.wsh)
  • Re: Run DTS as Scheduled Job
    ... Check that the SQL Agent service account has the correct permissions ... on all objects used by the DTS package (files, folders, servers, etc). ...
    (microsoft.public.sqlserver.dts)
  • Re: Prevent / deny folder creation on 2003 server from xp workstation
    ... When I set the correct permissions and apply it to the folders only, ... the only checked permission is 'list folder contents'... ...
    (microsoft.public.windowsxp.security_admin)
  • RE: sp2 deplyoment in test domain
    ... the correct permissions on it and that you've selected the "Apply Group ... Policy" switch in the GPO permissions dialog box; do a gpresult on the client ...
    (microsoft.public.windowsxp.setup_deployment)