Do I need to retain folders: All Users and Administrator? What
about Default User?
Yes and yes.
Default Local Disk Folders
Folder Name: Documents and Settings
Contents: Account information for each user who is granted access on the
computer. Each user account is represented by a subfolder assigned the
user name. Folders under each user account folder include My Documents,
Desktop, and Start Menu.
These include:
Documents and Settings\Administrator
Documents and Settings\All Users
Documents and Settings\Default User
Documents and Settings\LocalService
Documents and Settings\NetworkService
Documents and Settings\You
Some of the above are Hidden folders.
These are System folders and shouldn't be deleted.
Administrator is for the built in Administrator account.
All Users is used for many things. Your Desktop and Start Menu, for
example, display what is in All Users *and* what is in your Desktop and
Start Menu folders.
Default User is used when creating new accounts.
The Local Service account is a special built-in account that has reduced
privileges similar to an authenticated local user account. The actual
name
of the account is NT AUTHORITY\LocalService.
The Network Service account is a special built-in account that has
reduced privileges similar to an authenticated user account. The actual
name of the
account is NT AUTHORITY\NetworkService.
The LocalService and NetworkService accounts perform things like
synchronizing the time, etc.
From Small Potato.
<quote>
Just for more information, Local Service and Network Service accounts
are created for security reasons.
In Windows 2000/NT, system services are launched with "Local System"
credential, which has system-wide privilege as Administrator. So if the
service was attacked, attackers gain the privilege of Local System can
perform system-wide attack.
So Windows XP introduced Local Service and Network Service accounts for
system services. Both run with unprivileged "Limited Users" credential
instead of having full system rights, but Local Service access Windows
network using null sessions, i.e., it uses anonymous credential, while
Network Service access Windows network with the computer account, just
like Local System.
For more information, you may refer to this article:
The Services and Service Accounts Security Planning Guide
http://www.microsoft.com/technet/security/topics/serversecurity/serviceaccount/default.mspx
<quote>
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
/
...
\
/
....
\