Default permissions for the "Default User" account folder

From: Dave (daj@net1plus.com)
Date: 11/06/02 

From: "Dave" <daj@net1plus.com>
Date: Tue, 5 Nov 2002 19:54:11 -0800

I gather that Windows uses the permissions from this
folder when adding new user accounts. I have just set
the permissions on it as follows:

Full - Administrators - This folder, subfolders, and files
Full - SYSTEM - This folder, subfolders, and files
Full - CREATOR OWNER - Subfolders and files only
R&X - Users - This folder, subfolders, and files

The permissions for my entire Windows partition have been
at a level too restrictive to permit other users from
doing anything, since I was running in a single-user
environment. Now that I'm adding a few user accounts for
local access, I have to change my reconfigure everything;
problem is that I don't know what the default permissions
are for nearly anything, and I don't want to end up
configuring the setup to be too restrictive, yet I want
to minimize access to uncessary resources at the same
time.

I've played around with the Security Config. & Analysis
mmc snap-in a bit, and have created several templates
which have come in handy. The "Setup security.inf"
template describes itself as "default, out of the box
security settings," but the wording in the help files is
rather ambiguous: are these the settings that were
applied specifically to *my* computer during the upgrade,
or is the template the same on all computers running the
same Win OS version (XP Pro)?

Also, are there any additional security templates
available for download from MS?

BTW, I'm going to repost part of this message since it
strays from the subject a bit, so my apologizes if you
ended up reading this twice.

Thanks,

Dave

Relevant Pages

  • Re: Default permissions for the "Default User" account folder
    ... > I gather that Windows uses the permissions from this ... > folder when adding new user accounts. ... > Full - Administrators - This folder, subfolders, and files ... and have created several templates ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Getting the twain interface working on an XP user account
    ... That is I fiddled with the permissions, signed onto a non-admin account, and it might work once. ... I don't have those exact options on XP Home so I tried something I got on an MS forum relating to another program - tip supplied by Michael Bednarek http://mbednarek.com/ - seems to be very helpful for those programs that won't work in User accounts. ... When logged in as administrator navigate to relevant directory and from a command prompt execute following command ... you can extend it to ALL files in the folder with the command ...
    (comp.periphs.scanners)
  • Re: Folder Sharing Help Needed
    ... authenticating to domain user accounts] with simple file sharing disabled ... folder [NTFS permissions] of the folder being shared. ... the only file sharing that I can to work is simple sharing. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Sharing problems
    ... only one of the "user-name-Documents" folder is accesible on the PC with the ... four user accounts. ... You have just discovered NTFS permissions! ... Essentially, it's not a network problem, per se. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Software problem
    ... Check permissions on the installation folder that houses the program. ... access permissions in thier software for limited user accounts. ...
    (microsoft.public.windowsxp.basics)