Here is a batch file for the system volume ----------------------------------------------------------------- @ECHO OFF ECHO Setting security permissions on system volume. Please wait... REM ** Grant local Administrators and SYSTEM full control REM ** Grant local Users Read access to the root of the system volume. Cacls C:\ /c /g Administrators:F SYSTEM:F Users:R REM ** Users do not need access to the system boot files Cacls C:\boot.ini /e /c /r Users Cacls C:\config.sys /e /c /r Users Cacls C:\io.sys /e /c /r Users Cacls C:\msdos.sys /e /c /r Users Cacls C:\ntdetect.com /e /c /r Users Cacls C:\ntldr /e /c /r Users REM ** Revoke Everyone access to Documents and Settings Cacls "C:\Documents and Settings" /e /c /r Everyone Cacls "C:\Documents and Settings\All Users" /e /c /r Everyone Cacls "C:\Documents and Settings\All Users\*" /e /c /r Everyone Cacls "C:\Documents and Settings\Default User" /e /c /r Everyone Cacls "C:\Documents and Settings\Default User\*" /e /c /r Everyone REM ** Revoke Everyone access to WinNT folder Cacls C:\WINNT /e /c /r Everyone ------------------------------------------------------------------ And one for the application partition ----------------------------------------------------------------- @ECHO OFF ECHO Setting security permissions on application volume. Please wait... REM ** Grant local administrators and SYSTEM full control REM ** Grant local users read access to the entire volume. REM ** Permissions can be adjusted on specific applications if necessary. Cacls D:\ /T /c /g Administrators:F SYSTEM:R Users:R Cacls D:\* /T /c /g Administrators:F SYSTEM:F Users:R < yes.txt ------------------------------------------------------------------------ ---- -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Robert K Coffman Jr - Info From Data Corporation Sent: Monday, January 24, 2005 2:36 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] NTFS Permission Scripts Anyone have any links to scripts that set base NTFS permissions (any of NT 4 TSE, Win 2000, Win2003) for Terminal Servers? I'd like to take a look at them. Thanks - Bob Coffman ******************************************************** This Weeks Sponsor: ThinPrint, GmbH Now available: .print Remote Desktop Printing Engine for Microsoft Terminal Services http://www.thinprint.com/dotprint/index.php?s=682&lc=1 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm ThinWiki community - Excellent SBC Search Capabilities! http://www.thinwiki.com *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This Weeks Sponsor: ThinPrint, GmbH Now available: .print Remote Desktop Printing Engine for Microsoft Terminal Services http://www.thinprint.com/dotprint/index.php?sh2&lc=1 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm ThinWiki community - Excellent SBC Search Capabilities! http://www.thinwiki.com *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm