Re: Win2k3 C$ Permissions - Modifying

Hello,

While I agree, the problem is that we are using an older application that is
coded to access remote computers through the default admin c$ share (eg.
\\ip\c$\destfolder)

Instead of creating the same username/password used for the service identity
on all remote machines and giving that user Administrator access, I'd like
to remove the default c$ share and recreate my own so that I may add special
restricted permissions for the single user so that I can take it out of the
Administrators group but still access the c$ share.

Thanks,
--
Brock Hensley
http://BHensley.com
==
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message news:ff16fb662a3348cbd5c308d8f4c4@xxxxxxxxxxxxxxxxxxxxxxx
Hello Brock,

Do not change the default permissions for one user. If that one needs acccess to a special folder on the c-drive use only that folder to configure the needed permissions.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Hello,

I would like to modify the default admin share (c$) permissions to
give a specific user Read only access.

I'm not able to modify the default permissions, as expected.

My question is; if I disable the administrative share creation through
the registry (http://support.microsoft.com/kb/816524) what potential
problems would there be - more specifically if I recreated the c$
manually and added the following permissions, would it act the same or
would I be missing anything?

Administrators [Full]
SYSTEM [Full]
MyUser [Read]
Thanks!
-B



.

Relevant Pages

  • Re: Giving admins Local Admin to DCs not Domain Admins
    ... out permissions over the whole domain. ... Althought I can give the users PowerUser or LocalLogon rights via ... Can you with Server 2003 give a user just local admin to a DC ... but there's no such thing as local administrators ...
    (microsoft.public.security)
  • Re: MS Knowledgebase Article 298345-Cant delete file...
    ... Logging in as admin is not that important with NTFS. ... What is important is the the NTFS permissions have ... no grant to Administrators and the owner is also not ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Moving DCs From Default OU ?
    ... if I'm an admin (domain admins, administrators, enterprise admin, ... etc) you can deny whatever you want to. ... although I don't have permissions I can change them back so I do ...
    (microsoft.public.windows.server.active_directory)
  • Re: prevent user from seeing security tab
    ... > enterprise admin, domain admin etc, and the only built-in ... Next check your permissions on your root, ... "now they can basicly change permission for the admin on files they ... and can, indeed, change Administrators' permissions. ...
    (microsoft.public.cert.exam.mcse)
  • Re: More security questions
    ... You shouldn't be logging in as Admin, ... have permissions to do anything. ... Usernames/passwords/group membership are stored in the mdw. ... Microsoft Access MVP ...
    (microsoft.public.access.security)
Loading