Re: System Permissions

From: Rob (Rob_at_discussions.microsoft.com)
Date: 10/19/04 

Date: Tue, 19 Oct 2004 13:05:02 -0700

Is there any reason why the Users group is added to the systemroot
permissions? It is only read and execute but I was just curious why that
group is even included.

Thanks

"Steven L Umbach" wrote:

> Assuming you do not need guest access to the computer or are using ancient
> legacy applications you can remove everyone group from the \winnt folder or
> at best give it read permissions. The link below is to NSA security guide
> and downloads. If you view their security templates [ .inf file downloads ]
> for workstation or server you will see that the everyone group is not
> included for permissions to the \winnt folder. --- Steve
>
> http://nsa1.www.conxion.com/win2k/download.htm
>
> "Rob" <Rob@discussions.microsoft.com> wrote in message
> news:8F47A5ED-0FCE-4336-B7AC-E4B41068CF25@microsoft.com...
> > Is there a best practice for NTFS permissions on the WINNT directory, the
> > Everyone group? If someone could lead me to a resource that would be
> > great.
>
>
>

Relevant Pages

  • Solaris 10 autofs directory permissions - Solution
    ... the fact that my map file has 755 permissions not 644. ... If the execute permission is set, it becomes an executable map which is ... map is expected to return the content of an automounter map ...
    (SunManagers)
  • Re: Rights to execute jobs?
    ... Does anyone know if the rules surrounding stored procedure permissions apply ... Does this apply to a proc calling sp_start_job so that I ... raise the alert, so it could be anyone on the server. ... is that a group needs to not be an admin but still be able to execute ...
    (microsoft.public.sqlserver.security)
  • Re: Newbie
    ... I will now tell you some basic commands. ... Easy file has rights and a owner. ... file and who may execute it. ... The last three characters are about the permissions of user ...
    (alt.linux)
  • Re: Execute Persmission denied on object sp_OACreate
    ... SQL Server doesn't check permissions on indirectly referenced objects as ... You can prevent ad-hoc execution of powerful master database procs while ... >I have a user who has execute permissions on a store procedure in a>database> which in turns executes 4 stored procedures in the master database. ...
    (microsoft.public.sqlserver.security)
  • Re: Connecting to Sql Server 2005
    ... When you create the logon (or alter the login) in Enterprise Manager ... allows it the permissions it will need. ... executes the sp's I get the infamous EXECUTE permission denied on object ... I am using sql server authentication - I created a SQL server user in the ...
    (microsoft.public.dotnet.general)
Loading