Re: Allow ONLY "Administrator" and "System" groups full control to C:\

Well you will accomplish what you're trying to do and that is it will be
secured. However no one will be able to use it other than the Administrator.
Not a good idea. Leave the root permissions alone and apply your NTFS
permissions at the folder level.


"Ed Flecko" <EdFlecko@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6BA55846-612C-494B-9B6D-95485031FDEC@xxxxxxxxxxxxxxxx
Hi folks,
I'm setting up a new Server 2003-R2 server. I have added the
Administrators
and System groups full control of the C:\ drive, and removed everyone
else. I
see, by default, the C:\ drive has a few other directories and
subdirectories, i.e., "Windows", "Program Files", etc.

Since I'm setting this server up from scratch, in an effort to be as
secure
as possible, is there's anything wrong with selecting the little check box
"Replace permission entries on all child objects with entries shown here
that
apply to child objects." I know this will reset all pemissions from the
root
of C:\ down through all directories, I'm just wondering if I can expect
headaches or if this might be smart to do? I think it sounds like a smart
idea.

Comments? Suggestions?

Thank you,
Ed


.