Re: Default permissions for the "Default User" account folder

From: Kent W. England [MVP] (kwe@mvps.org)
Date: 11/06/02 

From: "Kent W. England [MVP]" <kwe@mvps.org>
Date: Tue, 5 Nov 2002 22:58:04 -0800

It may be that membership in the Users group is too restrictive for your
applications. In this case, try membership in the Power Users group
instead. 

-- 
Kent W. England, MS MVP for Windows XP
(Please respond only in the newsgroup)
"Dave" <daj@net1plus.com> wrote in message
news:642e01c28548$2a7315c0$37ef2ecf@TKMSFTNGXA13...
> I gather that Windows uses the permissions from this
> folder when adding new user accounts.  I have just set
> the permissions on it as follows:
>
> Full - Administrators - This folder, subfolders, and files
> Full - SYSTEM - This folder, subfolders, and files
> Full - CREATOR OWNER - Subfolders and files only
> R&X - Users - This folder, subfolders, and files
>
> The permissions for my entire Windows partition have been
> at a level too restrictive to permit other users from
> doing anything, since I was running in a single-user
> environment.  Now that I'm adding a few user accounts for
> local access, I have to change my reconfigure everything;
> problem is that I don't know what the default permissions
> are for nearly anything, and I don't want to end up
> configuring the setup to be too restrictive, yet I want
> to minimize access to uncessary resources at the same
> time.
>
> I've played around with the Security Config. & Analysis
> mmc snap-in a bit, and have created several templates
> which have come in handy.  The "Setup security.inf"
> template describes itself as "default, out of the box
> security settings," but the wording in the help files is
> rather ambiguous: are these the settings that were
> applied specifically to *my* computer during the upgrade,
> or is the template the same on all computers running the
> same Win OS version (XP Pro)?
>
> Also, are there any additional security templates
> available for download from MS?
>
> BTW, I'm going to repost part of this message since it
> strays from the subject a bit, so my apologizes if you
> ended up reading this twice.
>
> Thanks,
>
> Dave

Relevant Pages

  • Re: Why do some folders/registry keys have 2 permissions instead of 1?
    ... > I'm trying to write a script that will compare permissions for a large ... But if you check the folder or registry key's ... > group/user when it only needed to save one ACE. ... > gives Full Control to myuser for subfolders and files, ...
    (microsoft.public.win2000.general)
  • Re: Why do some folders/registry keys have 2 permissions instead of 1?
    ... > I'm trying to write a script that will compare permissions for a large ... But if you check the folder or registry key's ... > group/user when it only needed to save one ACE. ... > gives Full Control to myuser for subfolders and files, ...
    (microsoft.public.win2000.registry)
  • Re: Why do some folders/registry keys have 2 permissions instead of 1?
    ... > I'm trying to write a script that will compare permissions for a large ... But if you check the folder or registry key's ... > group/user when it only needed to save one ACE. ... > gives Full Control to myuser for subfolders and files, ...
    (microsoft.public.win2000.security)
  • Re: NTFS Permissions
    ... > I want to be able to secure my network file shares through NTFS permissions so that users cannot accidently delete subfolders or the root foler of their file share but have come across an interesting problem. ... > Then I have a test group called test1 with a bunch of users in the test group and I apply this group to have modify permissions on the test folder. ... Grant the users Read, Write, and Execute perms on the given folder, ...
    (microsoft.public.windows.server.general)
  • Default permissions for the "Default User" account folder
    ... I gather that Windows uses the permissions from this ... folder when adding new user accounts. ... Full - Administrators - This folder, subfolders, and files ... are there any additional security templates ...
    (microsoft.public.windowsxp.security_admin)