Re: Default Permissions

From: Steve Riley [MSFT] (steriley_at_microsoft.com)
Date: 12/23/04


Date: Thu, 23 Dec 2004 10:35:15 -0800

The default permissions on Windows Server 2003 are much tighter than they
were on Windows 2000. Further tinkering usually isn't necessary and can have
adverse side effects. Please consult the Windows Server 2003 Security Guide
for good guidance on the things that you can do to further enhance the security
of your computers by grouping them into "roles" and automatically applying
(through group policy) consistent security settings that are appropriate
for machines based on what the machines are doing.

http://www.microsoft.com/technet/security/prodtech/win2003/w2003hg/sgch00.mspx

Steve Riley
steriley@microsoft.com

> Hi!
>
> Can someone explain why the default permissions in every harddrives
> and partitions in Windows 2003 Server look like they do? For example
> if you look at advanced settings on security the "Users" group will
> appear with three different settings. And what is the reason to put
> the "System" group there. We feel like we want to remove all the
> default security and only leave the Administrators as default with
> full control and then add the permission we need in the subfolders.
>



Relevant Pages

  • RE: What server hardening are you doing these days?
    ... familiarity with the newer operating systems. ... was released a decade ago, and we're now dealing with Windows Server 2003, ... windows filesystem permissions". ... > can trash an NT box by denying LocalSystem permissions to ...
    (Focus-Microsoft)
  • RE: Capinst help
    ... If you run your site systems on Windows Server 2003 SP1, ... Resetting the DCOM permissions to pre- Windows Server 2003 SP1 levels ... SP1 splits the previous Launch permission into Local Launch and Remote Launch ...
    (microsoft.public.sms.admin)
  • Re: Folder Permissions
    ... The issue of folder permissions is not clear to me at all. ... The expensive book I bought on Windows Server 2003 seems ... Inheritence for the subfolder's subfolders ...
    (microsoft.public.windows.server.general)
  • Re: Folder Permissions
    ... The issue of folder permissions is not clear to me at all. ... The expensive book I bought on Windows Server 2003 seems ... Inheritence for the subfolder's subfolders *is* enabled, so any NTFS permissions on share1 will exist on any subfolder/files therein. ...
    (microsoft.public.windows.server.general)
  • Re: Mapped Drive Question
    ... On the Windows Server 2003 machine, the share permissions are: ... (webdocs is the name of an account on the Windows Server 2003 machine.) ... even though no such account exists on the server. ...
    (microsoft.public.windowsxp.general)