Re: everyone can use cacls.exe?
From: Laura E. Hunter \(MVP\) (hunter(nospamplease)_at_sfs.upenn.edu)
Date: 05/06/04
- Next message: coreymart: "Default AD Permissions"
- Previous message: arno: "everyone can use cacls.exe?"
- In reply to: arno: "everyone can use cacls.exe?"
- Next in thread: arno: "Re: everyone can use cacls.exe?"
- Reply: arno: "Re: everyone can use cacls.exe?"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 6 May 2004 10:47:21 -0400
Here are the default NTFS permissions for a 2000 install:
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q244600&ID=KB;EN-US;Q244600
2 caveats to be very aware of:
NOTE: These permissions do not apply to a drive that is converted to NTFS
using the Convert utility. A converted NTFS drive consists of all files and
folders with Everyone--Full Control as the default permission.
NOTE: The default permissions for the C:\ root directory, and all other hard
drive root directories (for example D:\, E:\), enable Full Control for the
Everyone special group, in Windows 2000.
You can tighten these NTFS permissions manually, or by using Security
Templates.
-- ****************************** Laura E. Hunter - MCSE, MCT, MVP Replies to newsgroup only "arno" <schoblochr@azoppoth.at> wrote in message news:u$OgZf3MEHA.3944@tk2msftngp13.phx.gbl... > Hi, > > Win2k Terminal Server SP4 and DC all-in-one-wonder-machine > > I have just written a batchfile that sets user-rights with cacls.exe. Any > normal user can run this batch successfully. > > So, everyone can set any userrights? Or did I not set the userrights for > my > C:\winnt folder correctly? Shall I restrict the user rights for cacls? If > yes, for what other exe-files should I do that, too? > > My local drives are all hidden and cannot be accessed. Dos-Console is > disabled. However, anyone can write a batchfile and run it, I cannot turn > this off as some programs need that. > > Best regards > > arno > > >
- Next message: coreymart: "Default AD Permissions"
- Previous message: arno: "everyone can use cacls.exe?"
- In reply to: arno: "everyone can use cacls.exe?"
- Next in thread: arno: "Re: everyone can use cacls.exe?"
- Reply: arno: "Re: everyone can use cacls.exe?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
