Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Permission & User Rights on Everyone Group on Standalone Server

Status
Not open for further replies.

Rexon30

Technical User
Mar 2, 2003
5
US
Is their any security issues with the user rights and permissions granted tot the Everyone group on a Windows NT 4.0 Server? Or, is this really primarily a clean-up issue. I have an auditor telling me it is security issue and when I don't believe it so.
 
Yes this is a security issue. For example you have a shared folder on your server that only user a needs access to, user b does not need to have access. You assign the everyone group full control say on that share and user b gets access as well as user a.

What you should be doing is creating a new local group, adding the relevant user to that group and assigning the permissions to the resource based on the local group you have created and remove the everyone group (would recommend that you also add the administrators group to the share permissions).
 
Would the same risk exist if the only accounts residing on the server are Administrator equivalents and the machine is standalone. No shares exists on the server.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top