Workstation C: security settings

From: Dave (dave_at_dave.com)
Date: 02/26/04 

Date: Thu, 26 Feb 2004 12:19:01 -0800

Hi,

We have a win2k domain with winXP workstations. The security settings on
the winXP C: are as follows.

Administrator - Full Control: This folder, subfolders and files
CREATOR OWNER - Full Control: Subfolders and files only
Everyone - Read & Execute: This folder only
SYSTEM - Full Control: This folder, subfolders and files
Users - Read & Execute: This folder, subfolders and files
Users - Create Folders / Append Data: This folder and subfolders
Users - Create Files / Write Data: Subfolders only

I find that this allows the user to use pretty much all of the C drive to
write data to, including installing programs(not in Program Files). Is this
a security risk? If yes, what recommendations can I follow to tighten up
the security?

Thanks!!!
Dave

Relevant Pages

  • Redirected folders, Desktop icons/Quicklaunch disappears after log in
    ... After the syncing is done, pressing F5 will show the missing desktop icons, ... Everyone Full Control ... Administrators - Full Control - This folder, subfolders, and files ...
    (microsoft.public.win2000.group_policy)
  • Workstation C: security settings
    ... The security settings on ... Administrator - Full Control: This folder, subfolders and files ...
    (microsoft.public.win2000.active_directory)
  • Workstation C: security settings
    ... The security settings on ... Administrator - Full Control: This folder, subfolders and files ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Odd File Behavior - Help!
    ... The quickest way to do that is to fiddle with the root folder of the ... System Full Control This folder, subfolders and files ... the Administrators group, and Creator/Owner. ...
    (misc.news.internet.discuss)
  • RE: Disappearing Network Share Subfolders
    ... Thank you for posting to the SBS Newsgroup. ... I understand that some of your Windows XP SP2 clients cannot view the ... subfolders in share folders on SBS 2K Server. ... Does the problematic share folder locate at NTFS or FAT32 disk? ...
    (microsoft.public.windows.server.sbs)