Basic Question

From: Gregory Suvalian (nospam@nowhere.com)
Date: 05/24/02


From: "Gregory Suvalian" <nospam@nowhere.com>
Date: Fri, 24 May 2002 08:36:00 -0700


It's been like that since WinNT 4.0, why is it done I
guess is becouse there is tone of things which local users
have to do in OS folder. They need to launch notepad.exe,
they need to be able to create and delete temporary files,
they need to access registry etc, people from network need
to be able to connect to shares and list files, etc.
You can try to mess with security permissions but you can
end up with non operational machine, you never know what
kind of dependency you might break my changing permissions
on tons of files.
I would not suggest to do that and instead of that limit
what users can see and do on machine using GPOs. They are
very robust.

Greg

>-----Original Message-----
>Hello:
>
>Just getting into 2000 (believe it or not) and I have a
question regarding
>security. I noticed that by default, everyone has access
ro
>everything...correct. To test this, I made and ordinary
user with user priv
>and logged onto the box and could get everywhere and
add/delete anything I
>wanted. This is not good.If yuo remove everyone at drive
level, you can't
>access it if explicit rights are granted to admins or
whomever. What am I
>missing here. How can I prevent ordinary users from
accessing system
>folders/files etc. I feel really stupid asking this
question but this has me
>a little confused.
>
>Thanks
>
>
>.
>



Relevant Pages

  • Permissions Conflict or MS-Word Issue???
    ... permission + all security permissions except FULL ... To the Forms folder I've assigned read-only security ... Now to the filing cabinet. ... haven’t tried to install anything. ...
    (microsoft.public.win2000.security)
  • Re: Document Library Security Not working properly ...
    ... misinterpreted his answer - if so apologies). ... don't mention removing the existing user types. ... Changed the security permissions ... > were able to open the folder fine. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: SBS 2003 Folder Share Permissions / Rights
    ... removed all Security permissions from the share. ... Then for each sub folder I ... non-inheritable Security permissions for full control. ... > can see and that contains sub folders which have different group rights. ...
    (microsoft.public.windows.server.sbs)
  • Re: GPOs not Applying
    ... in the GPO list (inside AD management) check the security permissions. ... > to the folder with Windows Explorer and access is denied on these folders. ...
    (microsoft.public.windows.server.sbs)
  • Re: Tell Me Where To Stick It!
    ... locations are fine for INI files and such. ... as I am all the time installing multiple ... while a folder under the app's location keeps it private to that particular ... it is not writable by ordinary users (I think our ...
    (microsoft.public.vb.general.discussion)