[THIN] Re: NTFS Permission Scripts

  • From: "Stodola, Ryan" <Stodola.Ryan@xxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Mon, 24 Jan 2005 14:58:44 -0600

Here is a batch file for the system volume
-----------------------------------------------------------------
@ECHO OFF
ECHO Setting security permissions on system volume.  Please wait...

REM ** Grant local Administrators and SYSTEM full control
REM ** Grant local Users Read access to the root of the system volume.
Cacls C:\ /c /g Administrators:F SYSTEM:F Users:R

REM ** Users do not need access to the system boot files
Cacls C:\boot.ini /e /c /r Users
Cacls C:\config.sys /e /c /r Users
Cacls C:\io.sys /e /c /r Users
Cacls C:\msdos.sys /e /c /r Users
Cacls C:\ntdetect.com /e /c /r Users
Cacls C:\ntldr /e /c /r Users

REM ** Revoke Everyone access to Documents and Settings
Cacls "C:\Documents and Settings" /e /c /r Everyone
Cacls "C:\Documents and Settings\All Users" /e /c /r Everyone
Cacls "C:\Documents and Settings\All Users\*" /e /c /r Everyone
Cacls "C:\Documents and Settings\Default User" /e /c /r Everyone
Cacls "C:\Documents and Settings\Default User\*" /e /c /r Everyone

REM ** Revoke Everyone access to WinNT folder
Cacls C:\WINNT /e /c /r Everyone
------------------------------------------------------------------
And one for the application partition
-----------------------------------------------------------------
@ECHO OFF
ECHO Setting security permissions on application volume.  Please wait...

REM ** Grant local administrators and SYSTEM full control
REM ** Grant local users read access to the entire volume.
REM ** Permissions can be adjusted on specific applications if
necessary.
Cacls D:\ /T /c /g Administrators:F SYSTEM:R Users:R
Cacls D:\* /T /c /g Administrators:F SYSTEM:F Users:R < yes.txt
------------------------------------------------------------------------
----
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Robert K Coffman Jr - Info From Data Corporation
Sent: Monday, January 24, 2005 2:36 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] NTFS Permission Scripts

Anyone have any links to scripts that set base NTFS permissions (any of
NT 4
TSE, Win 2000, Win2003) for Terminal Servers?  I'd like to take a look
at
them.

Thanks -

Bob Coffman

********************************************************
This Weeks Sponsor: ThinPrint, GmbH
Now available: .print Remote Desktop Printing Engine 
for Microsoft Terminal Services
http://www.thinprint.com/dotprint/index.php?s=682&lc=1
********************************************************** 
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor: ThinPrint, GmbH
Now available: .print Remote Desktop Printing Engine
for Microsoft Terminal Services
http://www.thinprint.com/dotprint/index.php?sh2&lc=1
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: