Re: Workstation C: security settings

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 02/27/04 

Date: Thu, 26 Feb 2004 20:53:39 -0500

If you don't want to go through the whole boatload of folders/subfolders,
the best way to secure you system is not to grant users local admin rights -
this will stop them installing (most) software, which is often enough.

Dave wrote:
> Hi,
>
> We have a win2k domain with winXP workstations. The security
> settings on the winXP C: are as follows.
>
> Administrator - Full Control: This folder, subfolders and files
> CREATOR OWNER - Full Control: Subfolders and files only
> Everyone - Read & Execute: This folder only
> SYSTEM - Full Control: This folder, subfolders and files
> Users - Read & Execute: This folder, subfolders and files
> Users - Create Folders / Append Data: This folder and subfolders
> Users - Create Files / Write Data: Subfolders only
>
> I find that this allows the user to use pretty much all of the C
> drive to write data to, including installing programs(not in Program
> Files). Is this a security risk? If yes, what recommendations can I
> follow to tighten up the security?
>
> Thanks!!!
> Dave

Relevant Pages

  • Re: Workstation C: security settings
    ... this will stop them installing software, ... Dave wrote: ... > We have a win2k domain with winXP workstations. ... Is this a security risk? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Workstation C: security settings
    ... this will stop them installing software, ... Dave wrote: ... > We have a win2k domain with winXP workstations. ... Is this a security risk? ...
    (microsoft.public.win2000.active_directory)
  • Re: Many "Thanks"
    ... "At the same time that I was installing a new MS Security ... Dave" ... the people who post help here do so in their free time. ...
    (microsoft.public.windowsxp.security_admin)
  • IT Security Administrator in Bend, OR
    ... workstations as well as physical security for I/T systems. ... manages network security software and hardware. ... Extensive experience with Windows 2000/2003 servers and Exchange ... Two years experience configuring, installing and implementing VMWare ...
    (comp.arch)
  • Re: Security Update for MS XML Core Services 4.0 Service Pack 2(KB
    ... Security Update installed on my PC on 4/17 (it was the day after I saw the ... But, after the Re-boot, Windows Update showed KB941833 as an Available ... You asked me to Post the name of the Security Software; ... keep installing and Updated to Vista Home Prem SP1 ...
    (microsoft.public.windowsupdate)
Loading