Windows 2000 sysvol and scripts folder

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have windows 2000 domain controllers working fine and everything but I want to know if anyone out their has ever tried to change the permissions on these to folders without any problems. The reason why I am asking this is because I want to take the permission everyone from the shares to keep users from executing scripts or anything without screwing up replication. Because I know that replication depends on these two share to replicate between the domain controllers.
 
Here are a few of the articles that discuss sysvol permissions and problems
you will have if you modify sysvol permissions.

Keep in mind everyone includes anonyomous and guest
Authenticated users is everyone except anonymous and guest.

Everyone all accounts , system, computer, etc.....

201227 Managing Security on Group Policy Data in SYSVOL
http://support.microsoft.com/?id=201227

229928 Design Decisions, Defaults and Behavior for FRS File and Folder
Filters
http://support.microsoft.com/?id=229928

250842 Troubleshooting Group Policy Application Problems
http://support.microsoft.com/?id=250842

258703 "Access Is Denied" Error Message When Running Dcpromo
http://support.microsoft.com/?id=258703

273857 How to Give Users Access to Group Policy Objects
http://support.microsoft.com/?id=273857

279156 The Effects of Setting the File System Policy on a Disk Drive or
Folder
http://support.microsoft.com/?id=279156

294257 "Failed to Open the Group Policy Object" Error Message Occurs When
You
http://support.microsoft.com/?id=294257

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.



James said:
I have windows 2000 domain controllers working fine and everything but I
Click to expand...
want to know if anyone out their has ever tried to change the permissions
on these to folders without any problems. The reason why I am asking this is
because I want to take the permission everyone from the shares to keep users
from executing scripts or anything without screwing up replication. Because
I know that replication depends on these two share to replicate between the
domain controllers.
 
Not recommended to change the defaults.

If you remove everyone just insure that authenticated users is in there.

Test and see if anything breaks, I cant speak for all of the custom policies
that you may have created. You will need to test this your self.

As long as authenticated users is there with the same permissions you should
not see any drastic problems.

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
 
Back
Top