Re: Users accessing C$

From: Chris Hagon (ChrisHagon_at_discussions.microsoft.com)
Date: 07/15/05 

Date: Fri, 15 Jul 2005 01:17:03 -0700

Thanks for your help Steven; I feel I should have known this, but we learn by
asking I believe. I am beginning to put your advice into practise, thanks
once again

-------
Tech Admin
West Midlands, England
Stressed and Tired!
--------

"Steven L Umbach" wrote:

> A user will not need write/modify/full control permissions to logon to a TS
> or other computer with the possible exception of their user profile if they
> are allowed to save and manage files there. So what I would do is to make
> sure that users have no more then read/list/execute permissions to any
> folder where you do not want them to store files to. Other then the system
> folders, root folder, user profiles, and folders that they need to write to
> or run applications from they need no permissions on other folders. The link
> below may help. --- Steve
>
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419
> http://support.microsoft.com/?scid=327522
>
> WORKAROUND
> To work around this issue, reset the permissions for the root directory on
> the system drive. The default permissions for Windows XP can serve as a
> guide for a set of permissions that have been thoroughly designed and
> tested. The following are the default permissions for the root directory on
> the system drive for Windows XP: . Administrators: Full (This Folder,
> Subfolders, and Files)
> . Creators Owners: Full (Subfolders and Files)
> . System: Full (This Folder, Subfolders, and Files)
> . Everyone: Read and Execute (This Folder Only)
>
>
> "Chris Hagon" <ChrisHagon@discussions.microsoft.com> wrote in message
> news:A15D2BDF-11E0-4C37-9E38-9E4759E0B070@microsoft.com...
> > I've recently discovered one user saving files while in a Terminal Server
> > session to the 'C:' drive - which is the server root. Obviously users
> > have
> > files on other servers but should not be saving anything to our Terminal
> > Server.
> >
> > I'm a little hazy on how the permissions should be set-up to allow people
> > to
> > log in but not access the actual server HDD itself
> >
> > Any ideas? Thanks!
> >
> > -------
> > Tech Admin
> > West Midlands, England
> > Stressed and Tired!
> > --------
>
>
>

Relevant Pages

  • Re: For the experts only!
    ... Move join.txt to the _private folder (which by default has write permissions) and change your form properties to ... The server host says the problem is ... | all .htaccess files in all folders and reload the site up ... |>| I have reset the permissions on the admin program of FP ...
    (microsoft.public.frontpage.client)
  • Re: Trouble configuring Outlook
    ... If you're using Exchange, permissions are granted at the server level. ... > individual folders and subfolders; ...
    (microsoft.public.outlook.installation)
  • Access denied
    ... I've got a client with a server running SBS3K on it with 5 clients running ... permissions set to a folders containing those files and all was good. ...
    (microsoft.public.windows.server.sbs)
  • Re: Can I copy files/folders and retain share info?
    ... > I am setting up a replacement file server and it ... Created Files or folders - Inherit permissions of the folder they are ... Moved or copied files or folders in a different NTFS volume - Inherit ...
    (microsoft.public.win2000.general)
  • Re: Shared inbox
    ... How were the additional permissions granted? ... Take those rights away on the server, ... user's folders, you'll need to grant the delegate at least 'reviewer' rights ... to the root of the other mailbox in Outlook. ...
    (microsoft.public.exchange2000.admin)