Re: Users accessing C$

From: Chris Hagon (ChrisHagon_at_discussions.microsoft.com)
Date: 07/15/05 

Date: Fri, 15 Jul 2005 01:37:01 -0700

On checking Steven I noticed our rights were set as you mentioned, however,
if I checked the security on the root and went to 'Advanced' then the 'Users'
group had Allow rights to 'Create folders & append data' on this root.

I have now Denied this and tested creating a folder with a user with
standard privileges and this has worked. Would someone have enabled this by
default and what are the possible ramifications of me denying this option?

-------
Tech Admin
West Midlands, England
Stressed and Tired!
--------

"Chris Hagon" wrote:

> Thanks for your help Steven; I feel I should have known this, but we learn by
> asking I believe. I am beginning to put your advice into practise, thanks
> once again
>
> -------
> Tech Admin
> West Midlands, England
> Stressed and Tired!
> --------
>
>
> "Steven L Umbach" wrote:
>
> > A user will not need write/modify/full control permissions to logon to a TS
> > or other computer with the possible exception of their user profile if they
> > are allowed to save and manage files there. So what I would do is to make
> > sure that users have no more then read/list/execute permissions to any
> > folder where you do not want them to store files to. Other then the system
> > folders, root folder, user profiles, and folders that they need to write to
> > or run applications from they need no permissions on other folders. The link
> > below may help. --- Steve
> >
> > http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419
> > http://support.microsoft.com/?scid=327522
> >
> > WORKAROUND
> > To work around this issue, reset the permissions for the root directory on
> > the system drive. The default permissions for Windows XP can serve as a
> > guide for a set of permissions that have been thoroughly designed and
> > tested. The following are the default permissions for the root directory on
> > the system drive for Windows XP: . Administrators: Full (This Folder,
> > Subfolders, and Files)
> > . Creators Owners: Full (Subfolders and Files)
> > . System: Full (This Folder, Subfolders, and Files)
> > . Everyone: Read and Execute (This Folder Only)
> >
> >
> > "Chris Hagon" <ChrisHagon@discussions.microsoft.com> wrote in message
> > news:A15D2BDF-11E0-4C37-9E38-9E4759E0B070@microsoft.com...
> > > I've recently discovered one user saving files while in a Terminal Server
> > > session to the 'C:' drive - which is the server root. Obviously users
> > > have
> > > files on other servers but should not be saving anything to our Terminal
> > > Server.
> > >
> > > I'm a little hazy on how the permissions should be set-up to allow people
> > > to
> > > log in but not access the actual server HDD itself
> > >
> > > Any ideas? Thanks!
> > >
> > > -------
> > > Tech Admin
> > > West Midlands, England
> > > Stressed and Tired!
> > > --------
> >
> >
> >

Relevant Pages

  • Re: Passwording Outlook 2002
    ... The password is on the .pst file that you open (which contains your ... Each user gets their own user profile path for document files (it's under ... It's possible that permissions have been changed to allow the Everyone ... folders and files where the Everyone group can do whatever they want. ...
    (microsoft.public.outlook)
  • Re: Our server hacked and tagged. MS docs suck!
    ... If you are getting issues with deleting folders even though you have ... > Ya we did that and 'permission denied' still, somewhere> down the tree of the folder it experiences a permissions> error..Unfortunately we are unable to go down the tree of> the directory but I will look closer at the permissions> and owner. ... I was thinking these> directories might have some kind of root somewhere that we> could delete and get rid of them, but as you said, I will> look at it as simply files and folders. ... >>Please note I cannot respond to e-mailed questions. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Default NTFS permissions too liberal on newly created volumes
    ... The disk root is secured exactly you have found. ... own folders and files and to their own object they have full control. ... Restrict the root folder permissions either manually or by GPO. ... > brings liberal permissions to the root of the drive for the USERS group. ...
    (microsoft.public.windows.server.security)
  • Re: Why does Everyone have Full Control of everthing?
    ... On *MY* XP Pro system at home all files and folders *DO* inherit ... looked the XP system I use at work, and the permissions are set ... My root at work has permissions ...
    (microsoft.public.windowsxp.general)
  • Re: Secure file and folder permissions
    ... > Can I select all folders contained in contained in the root and ... encrypted files. ... use NTFS permissions to secure files. ...
    (microsoft.public.windowsxp.security_admin)