Re: Windows 2000 Server - Everyone

From: Stuart Mueller (I.Dont.Have_at_email.address)
Date: 10/14/04


Date: Thu, 14 Oct 2004 14:03:57 +0100

Paul sat down at the computer and wrote:

> A Windows 2000 Server (Domain) was installed at my company in the end
> of April. Now, I noticed on all of the Folders in Windows Explorer
> that when you right click on a folder, go to properties, and go to
> security there is a group called Everyone with the persmissions
> dimmed out gray. I did not put that there, so I am thinking it was
> done by default. What permissions does that group grant to users and
> what uses have access? Is it hurting anything? How do I remove that
> group from all of the folders? If I do remove that group, will it
> create problems? Thank You!

I generaly remove hte everyone group, and add the following permissions:

users group - read+exectue+list
Administrators group - Full
System - Full

The domain users group will be a member of the users group and the
domain admins group will be a member of hte administrators group.
You nee the SYSTEM user for the pagefile.

All these permissions I set on hte C: drive, or the root of whatever
drive you want to make the changes on.

Stuart

--
A free society is one where it is safe to be unpopular.
  -- Adlai Stevenson


Relevant Pages

  • Re: Default NTFS permissions too liberal on newly created volumes
    ... The disk root is secured exactly you have found. ... own folders and files and to their own object they have full control. ... Restrict the root folder permissions either manually or by GPO. ... > brings liberal permissions to the root of the drive for the USERS group. ...
    (microsoft.public.windows.server.security)
  • Re: Default NTFS permissions too liberal on newly created volumes
    ... with no permissions and force all people to always have to set NTFS ... permissions when a new partition is formatted ?? ... The user was able to create folders and files in the ... > brings liberal permissions to the root of the drive for the USERS group. ...
    (microsoft.public.windows.server.security)
  • Re: Default NTFS permissions too liberal on newly created volumes
    ... it sounds like your users had excessive share permissions. ... read share permissions they would not have been able to create folders. ... Windows 2003 Server Security Guide and the Threats and Countermeasures Guide ... > brings liberal permissions to the root of the drive for the USERS group. ...
    (microsoft.public.windows.server.security)
  • Re: Power Users Local Group Access
    ... permissions than Windows 2000 by default. ... power users the ability to create folders only in the root folder and not files. ... The power users group does have write permissions to the program folders ...
    (microsoft.public.security)
  • Re: NTFS Security Question.
    ... A subordinate object DOES not inherit the PARENT perms (in ... will assume "Nebulous" permissions that refer to the LINK ... The trick is to PROPOGATE to all FILES (not Folders and Files - that would ... Since Windows 2000 deny NTFS permission does not work ...
    (microsoft.public.windowsxp.security_admin)