Netlogon Share Permissions

  • Thread starter Thread starter Steve Pope
  • Start date Start date
S

Steve Pope

In NT4.0 the "Netlogon" share had it security set to Everyone-Read Only.

In Win2k this was changed to Everyone-Read and Domain Admins-FC

1. Why Microsoft changed this
2. Can we change all the Netlogon share permissions back to just
Everyone-Read Only
 
Normal users do not have to change anything in the
netlogon folder. They just have to grab their
corresponding logon scripts from that share. Read Only
access is enough to perform this action. So to minimize
the risk share permisions should be kept tighter.
 
Back
Top