c:\ drive permissions
From: Nathan (caseynathan_at_hotmail.com)
Date: 06/24/05
- Next message: Nathan: "c:\ drive permissions"
- Previous message: SunRace: "OS Fingerprinting Prevention"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 23 Jun 2005 17:05:12 -0700
The Desktop team in our department has been deploying PC's with the C:\
drive permissions changed. They thought it would be convenient for the user
if everyone had full control of the entire c:\ drive.
I now need to return the c:\ drive permissions back to winxp standard. If I
go the advances security tab for the c:\ drive and edit the permissions for
the "everyone" group and change the permissions to:
Traverse Folder / Execute File
List folder / Read Data
Read Attributes
Read Extended Attributes
Read Permissions
I then Select "This Folder Only" in the "Apply onto" drop down menu.
Now the sub directories now longer inherit the "everyone" group permissions.
Since I need this done on several hundred PC's I have been testing
subinacl.exe
I ran the following command on a fresh winxp install to get a backup of the
default c:\ drive permissions:
subinacl /noverbose /output=c:\aclbackups.txt /file c:\
I then ran "subinacl /playfile c:\aclbackups.txt" on a PC that had the c:\
permissions changed.
The command changed the c:\ permissions back to base winxp c:\ drive
permissions but the sub folders still had inherited the "everyone" group
full control. On the advanced tab the "Inherited From" section showed
"Parent Object" instead of "C:\"
Any ideas on how I can change the C:\ drive and sub directories back to
winxp base permissions would be greatly appreciated.
Thanks
Nathan
- Next message: Nathan: "c:\ drive permissions"
- Previous message: SunRace: "OS Fingerprinting Prevention"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
