Re: Workstation C: security settings

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 02/27/04

  • Next message: Steven L Umbach: "Re: Workstation C: security settings" 
    Date: Thu, 26 Feb 2004 20:53:39 -0500

    If you don't want to go through the whole boatload of folders/subfolders,
    the best way to secure you system is not to grant users local admin rights -
    this will stop them installing (most) software, which is often enough.

    Dave wrote:
    > Hi,
    >
    > We have a win2k domain with winXP workstations. The security
    > settings on the winXP C: are as follows.
    >
    > Administrator - Full Control: This folder, subfolders and files
    > CREATOR OWNER - Full Control: Subfolders and files only
    > Everyone - Read & Execute: This folder only
    > SYSTEM - Full Control: This folder, subfolders and files
    > Users - Read & Execute: This folder, subfolders and files
    > Users - Create Folders / Append Data: This folder and subfolders
    > Users - Create Files / Write Data: Subfolders only
    >
    > I find that this allows the user to use pretty much all of the C
    > drive to write data to, including installing programs(not in Program
    > Files). Is this a security risk? If yes, what recommendations can I
    > follow to tighten up the security?
    >
    > Thanks!!!
    > Dave

  • Next message: Steven L Umbach: "Re: Workstation C: security settings"

    Relevant Pages

    • Re: Workstation C: security settings
      ... this will stop them installing software, ... Dave wrote: ... > We have a win2k domain with winXP workstations. ... Is this a security risk? ...
      (microsoft.public.win2000.security)
    • Re: Workstation C: security settings
      ... this will stop them installing software, ... Dave wrote: ... > We have a win2k domain with winXP workstations. ... Is this a security risk? ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Many "Thanks"
      ... "At the same time that I was installing a new MS Security ... Dave" ... the people who post help here do so in their free time. ...
      (microsoft.public.windowsxp.security_admin)
    • IT Security Administrator in Bend, OR
      ... workstations as well as physical security for I/T systems. ... manages network security software and hardware. ... Extensive experience with Windows 2000/2003 servers and Exchange ... Two years experience configuring, installing and implementing VMWare ...
      (comp.arch)
    • Re: Security Update for MS XML Core Services 4.0 Service Pack 2(KB
      ... Security Update installed on my PC on 4/17 (it was the day after I saw the ... But, after the Re-boot, Windows Update showed KB941833 as an Available ... You asked me to Post the name of the Security Software; ... keep installing and Updated to Vista Home Prem SP1 ...
      (microsoft.public.windowsupdate)