Netlogon Share Permissions

From: Dmitry Kulshitsky (dimkin_remove__at_mbox.com.au)
Date: 07/31/03


Date: Wed, 30 Jul 2003 19:24:02 -0700


Normal users do not have to change anything in the
netlogon folder. They just have to grab their
corresponding logon scripts from that share. Read Only
access is enough to perform this action. So to minimize
the risk share permisions should be kept tighter.

>-----Original Message-----
>In NT4.0 the "Netlogon" share had it security set to
Everyone-Read Only.
>
>In Win2k this was changed to Everyone-Read and Domain
Admins-FC
>
>1. Why Microsoft changed this
>2. Can we change all the Netlogon share permissions back
to just
>Everyone-Read Only
>
>
>.
>