*NEWBIE* permissions settings

[*ProteanThread*]

just a newbie question, what happens when i remove Everyone from
permissions on the root drive and add authenticated users only?

 

[John John]

I've never tried it, I suppose it should work but I don't think I would
want to do that (in fact I know I wouldn't). You might have logon
problems or a blank desktop if it doesn't work. You will have to
remember the setting when you create new users or else they wont be able
to logon. If ever you need to troubleshoot the installation with a Safe
Mode boot or the Recovery Console it might come back to haunt you.

John

 

[Steve Parry]

just a newbie question, what happens when i remove Everyone from
permissions on the root drive and add authenticated users only?

Something at the back of my mind says that in 2000 and up Everyone means
authenticated users, on NT4 Everyone meant everyone and anyone.

 

[Dave Patrick]

Make sure that the System account (NT Authority) has full control of the
%systemdrive% and or the drive you're trying to put the pagefile on. My
Computer|Drive|File|Properties|Security|Permissions

The system account (nt authority) is the operating system's account and
needs to have full control of the drive(s) the pagefile exists on. The
system account is included in the "Everyone" group.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| just a newbie question, what happens when i remove Everyone from
| permissions on the root drive and add authenticated users only?
|

 

[*ProteanThread*]

But, Dave, does it give me added security to remove "Everyone" and add
"Authenticated Users" and "System" Accounts?

 

[Dave Patrick]

Depends. Who are you trying to lock out?

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| But, Dave, does it give me added security to remove "Everyone" and add
| "Authenticated Users" and "System" Accounts?
|

 

[*ProteanThread*]

Anonymous Users and non-authenticated users (except system, obviously)

 

[Dave Patrick]

How are they going to access? Local logon? Network logon? Internet? Domain
or workgroup? Firewall in place?

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Anonymous Users and non-authenticated users (except system, obviously)
|

 

[*ProteanThread*]

i think i see what you mean, i want to setup disable access to
non-local users or un-authenticated users.

 

[Dave Patrick]

Everything you need is already in-place. Make sure the guest account is
disabled and password all other local accounts. Unbind (uncheck) "File and
Printer Sharing" on the connection if not needed.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
|i think i see what you mean, i want to setup disable access to
| non-local users or un-authenticated users.
|

 

[*ProteanThread*]

ok. where can i find out more about setting per user or per group
policies, dave?

again, thanks.

 

[Dave Patrick]

Probably start here.

http://www.microsoft.com/windowsserver2003/technologies/management/grouppolicy/default.mspx

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| ok. where can i find out more about setting per user or per group
| policies, dave?
|
| again, thanks.
|

 

[*ProteanThread*]

again, thanks.

 

[Dave Patrick]

You're welcome.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| again, thanks.