People,

As default, all user in a domain is a member os domain\user group. This
group have, as default, read access for all directories in the server. Where
I can change it?

Thanks!

Max-

You can change this at the drive level or the folder level. Right-click and
go to Properties. From there, go to Security and set the permissions
appropriately. As long as you have inheritance enabled (which it is by
default), your permissions will end up applying down the tree. However, you
can also go to the "Advanced" button and choose the option to "Replace
permission entries on all child objects with entries shown here that apply
to child objects".

BS


"Max André Bündchen" <x@y.com> wrote in message
news:OyG$GF%23%23DHA.1212@TK2MSFTNGP12.phx.gbl...

Dear Max,

Thank you for your post here!

Technically speaking, they belong to default security permission which have
been assigned to "Domain Users" group. To change the built-in permission,
we need to change the AD schema which is not practical in this case.

I suggest you can change the security permission of the drive which hosts
those folders, just like BS provided in his post, you can implement it by
this way:

1. Open Windows Explorer, right-click your drive, click properties, click
on Security tab.
2. Click Advanced tab, and add the "Domain user" group to grant the
appropriate the permission to him.
3. Make sure choose the option to "Replace permission entries on all child
objects with entries shown here that apply to child objects".
4. Click OK.

I hope it helps!

Best Regards,

Frank Chen, MCSE
Microsoft Partner Support Professional

Get Secure! - www.microsoft.com/security

================================================== ===
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
================================================== ===

This posting is provided "AS IS" with no warranties, and confers no rights
--------------------
<From: "Max André Bündchen" <x@y.com>
<Subject: Changing default user file permissions
<Date: Wed, 25 Feb 2004 17:53:10 -0300
<Lines: 9
<X-Priority: 3
<X-MSMail-Priority: Normal
<X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
<Message-ID: <OyG$GF##DHA.1212@TK2MSFTNGP12.phx.gbl>
<Newsgroups: microsoft.public.windows.server.active_directory
<NNTP-Posting-Host: 200.203.45.100
<Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGXS01.phx.gbl!TK2MSFT NGXA05.phx.gbl!TK2MSFTNGP0
8.phx.gbl!TK2MSFTNGP12.phx.gbl
<Xref: cpmsftngxa06.phx.gbl
microsoft.public.windows.server.active_directory:1 1115
<X-Tomcat-NG: microsoft.public.windows.server.active_directory
<
<People,
<
<As default, all user in a domain is a member os domain\user group. This
<group have, as default, read access for all directories in the server.
Where
<I can change it?
<
<Thanks!
<
<
<