Re: Permissions on C: Root

From: Carl Naegele (naegele@usfca.edu)
Date: 12/08/02 

From: "Carl Naegele" <naegele@usfca.edu>
Date: Sat, 7 Dec 2002 17:56:46 -0800

Karl,

Really appreciate your fine suggestions. I'll give them a
try.

--Carl Naegele

>-----Original Message-----
>
>"Carl Naegele" <naegele@usfca.edu> wrote in message
>news:02a401c29e2d$0e20e930$8bf82ecf@TK2MSFTNGXA05...
>> I am running Windows 2000 Professional. I did some
>> experimenting with permissions, and now only members of
>> the administrator group can logon. I reset the default
>> NTSF Permissions using the "basicwk.inf" Security
Template
>> and all permissions seemed to have been reset properly,
>> except for the root directory of the drive which is did
>> not alter. The current permissions on the root are the
>> Administrators Group and System, both having full
>> control. What other groups should appear on the root?
If
>> I add them, do I then reset those permissions on all
child
>> objects and enable propagation of inheritable
permissions?
>
>By default, everyone has full permission to the root. I
seem to remember
>reading where everyone should have at least read
permission to the root if
>not more, and I would recommend administrators and system
have full
>permission.
>
>When trying to restore permissions back to the default, I
would say you
>should first apply the "setup security" template first,
then basikwk. If
>you look at the sizes of these two files and inspect
their contents using
>Notepad, you can see that none of the templates except
for setup security
>comprehensively resets all permissions. the other
templates just reset the
>permissions that differ from the previous templates that
are assumed to have
>been previously applied. I also believe there is a
knowledge base article
>at www.microsoft.com/support that outlines a different
template file
>existing in a different location [possibly
windowsroot\inf\ ] which I
>believe is the actual template that was created and used
during the install
>of Windows. More info on resetting group policy and a
link to this article
>are at:
>
>http://securityadmin.info/faq.htm#4.11
>http://securityadmin.info/faq.htm#4.41
>
>
>
>
>---
>Outgoing mail is certified Virus Free.
>Checked by AVG anti-virus system (http://www.grisoft.com).
>Version: 6.0.423 / Virus Database: 238 - Release Date:
11/25/2002
>
>
>.
>

Relevant Pages

  • RE: RPc server is unavailable since SP1
    ... I finally called Tech Support and we found out that there is a hotfix out ... In the Launch and Activation Permissions area, ... > IV. Please change permissions on the Workstation Authentication template to ... > that you want to autoenroll) enable autoenrollment by navigating to the ...
    (microsoft.public.windows.server.sbs)
  • Re: Customzing Security Template Files
    ... I tried my template editing steps with an XPSP2 ... permissions dialog box when you configure a service and you don't end up ... > As you work with the Security Templates and the Security Configuration ... >> Windows Server 2003 given the version of guide you mention). ...
    (microsoft.public.security)
  • Re: Customzing Security Template Files
    ... You are welcome Shawn. ... I tried my template editing steps with an XPSP2 ... > permissions dialog box when you configure a service and you don't end up ... >> As you work with the Security Templates and the Security Configuration ...
    (microsoft.public.security)
  • Re: Customzing Security Template Files
    ... different from System need full permissions to the service.>> ... I did try some more experimenting with new template files and came ... load the Security Templates snap-in and expand the Security ... > Windows Server 2003 given the version of guide you mention). ...
    (microsoft.public.security)
  • Re: Permissions on C: Root
    ... I reset the default ... >> and all permissions seemed to have been reset properly, ... The current permissions on the root are the ... > should first apply the "setup security" template first, ...
    (microsoft.public.win2000.security)