Re: Need initial pointers

From: Steven L Umbach (sumbach55_at_ameritech.net)
Date: 11/15/03 

Date: Sat, 15 Nov 2003 17:05:42 GMT

Here is a link on how to restore default NTFS permissions to W2K. In a
default installation, NTFS permissions are fairly good except on the
drive/root folder where the everyone group may have full permissions which
you will want to probably reduce to just read/list/execute. You may also
want to read the free download Windows 2000 Security Hardening Guide for
configuration advice which includes specific recommendations [including ntfs
permissions] based on network configuration and security goals, see second
link for download link for it. --- Steve

http://support.microsoft.com/?kbid=266118
http://www.infosec.uga.edu/windows.html

"Teacher" <anonymous@discussions.microsoft.com> wrote in message
news:079e01c3ab37$222755a0$a101280a@phx.gbl...
> I need to check up permissions on an existing server and
> could use some very basic pointers. I'm a physics/ chem/
> algebra teacher at a non-profit high school for at-risk
> students and as an additional duty, I volunteered to be
> the system admin to a network running Windows 2000 Server
> that's connencted to a mix of 30+ NT and W2K clients. I
> love technology and pick up things fast once I understand
> a few of the basics.
>
> Right now I'm trying to dig myself out of situations that
> are related to users not being able to run programs or
> create folders for roaming profiles which cause the local
> profiles to be loaded.
>
> I've gone thru the Group Policy snap-in and enabled
> the "don't check roaming profile security" policy but I
> think I'm making a basic mistake in my propagated user
> rights. I've propagated Full Control for Administrator
> (domainname), System, and Services; I've also propagated
> Read for Everybody. I believe I have a solid understanding
> of Shares and nonpropagated user rights and have set up
> the Profiles, etc correctly.
>
> What I think I've seriously messed up is what rights need
> to be assigned to the WINNT and Program Files folders
> because I only have the above mentioned propagated rights
> on them currently.
>
> Any help/direction would be greatly appreciated!

Relevant Pages

  • Re: Strange permissions problem
    ... > I'm a sys admin and I'm having a strange problem with permissions. ... > just normal users on the network, but they've been give full rights on all ... > of the folders that contain the code that they are working with. ...
    (microsoft.public.vb.com)
  • Starting over on fileshares...
    ... employment migrated from a Novell fileserver to Windows 2003 (on a Win2K ... permissions, rather than giving domain users full control share permissions ... and locking down the folders with their NTFS permissions. ...
    (microsoft.public.windows.server.migration)
  • Re: Permissions problem, I think?
    ... I recently struggled with SBS2003 rights and for what it's worth I think ... Shared folders assign "Permissions" to user to access folders ... > replaced with a Windows Server 2003 Std. ...
    (microsoft.public.windows.server.sbs)
  • Re: How to document directory/ file rights
    ... I assume you mean folders when you mean directories and are not referencing ... local group on a domain computer and assign permissions to the local group. ... Also "special permissions" seen in the advanced page of security properties ... "Rights" usually refer to user rights or ...
    (microsoft.public.win2000.security)
  • Re: quick file sharing question
    ... Going back and checking the share setup I have, you are correct in stating the share perms are only 3 types. ... You write "Share permissions have the same functionality ... individual files and folders within that share. ... NTFS permissions can be set for a whole tree or for any file ...
    (microsoft.public.windows.server.general)