Re: documents and settings security
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 9 Jan 2006 11:01:26 -0600
You could try to use secedit as described in the link below to reset
security settings back to default defined levels and append /areas filestore
to the command and then change permissions on the folders as need be but
never select "replace entries on child objects" from the root folder. The
idea of giving everyone full control seems way excessive to me and not
keeping within the principle of least privilege for users. You might want to
look further at exactly where the user needs what permissions for what
folder. By default a regular user can create folders in the root folder.if
you look at special permissions and you may be able to tweak from there by
gradually giving the user more permissions there to see if you can make it
work. The second link below explains more on special permissions. ---
Steve
http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419 --- XP
special permissions
"Mario Savard" <MarioSavard@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:85367090-D733-433C-9755-A835366661CB@xxxxxxxxxxxxxxxx
> We have users that are new under XP and they can not create folders else
> where on the C:\ and it was also preventing some in-house programme to
> run.
> So what we did is to setup the C:\ to everyone full control like it was
> under
> windows 2000. But what also happened is the documents and settings got
> change to everyone full control. So which mean any one can delete other
> user's data. Is there a quick way to restore the original security
> settings
> for the documents and settings and to leave the c:\ setup to full control
> for
> everyone?
.
- Prev by Date: Re: Firewall Question
- Next by Date: Re: Can't run Device Manager
- Previous by thread: Re: Firewall Question
- Next by thread: Re: Can't run Device Manager
- Index(es):
Relevant Pages
|
