Administrator folder privileges

  • Thread starter Thread starter MW
  • Start date Start date
M

MW

When I reload machines, the administrator folder default
settings give "Everyone" full control of the folder. Is
there a way to make the defualt setting where only the
administrator has access to that folder?

MW
 
What Administrator folder? In Documents and Settings?

--
--
Daniel Chang
Server Setup Team

Search our Knowledge Base at http://support.microsoft.com/directory
Visit the Windows 2000 Homepage at
http://www.microsoft.com/windows2000/default.asp
See the Windows NT Homepage at http://www.microsoft.com/ntserver/

NOTE: Please reply to the newsgroup and not directly to me. This allows
others to add to and benefit from these threads and also helps to ensure a
more timely response. Thank you!
This posting is provided "AS IS" without warranty either expressed or
implied, including, but not limited to, the implied warranties of
merchantability or fitness for a particular purpose.
The views and opinions expressed in this newsgroup posting are mine and do
not necessarily express or reflect the views and / or opinions of Microsoft.


: When I reload machines, the administrator folder default
: settings give "Everyone" full control of the folder. Is
: there a way to make the defualt setting where only the
: administrator has access to that folder?
:
: MW
 
You can use a script that uses the CACLS or XCACLS command [the latter is I
believe part of the Windows Resource Kit, which is not free].

You can also use Group Policy, either via Active Directory in a Windows 2000
domain, or by running MMC and adding the Security Templates and Security
Configuration snap-ins, or by editing the sample templates in
%windowsroot%\security\templates\ and using the SECEDIT /? command. You
create a template and then import it into the security database, and both
steps can either be done in a GUI MMC or at the command line. Perhaps a
little trickier than using CACLS, but if you do this via Active Directory,
it happens automatically when you log into the domain.
 
Back
Top