Power Users 1

[Wazz]

Hi,

Please can someone tell me if, by default the power users group is in the program files and windows directory?

Thanks
wazz

 

[Wazz]

Actually, I forgot to ask.. Can someone please tell me what are the default permissions? Basically, I have done the image for the computers at work and someone tells me the permissions arent correct... but I havent (I dont think) changed them.

Thanks!

 

[linney]

On a relative clean install of XP Pro that I have checked, both the Program Files and Windows folders have the Power User Group listed, is this the answer that you are seeking?


Administrator = Full Control + all boxes except Special Permissions
CREATOR OWNER = blank except for Special Permissions (Dimmed)
Power Users = Modify + all boxes except Special Permissions and Full Control
System = Full Control + all boxes except Special Permissions
Users = Read & Execute, List Folder Contents, Read

How to reset security settings back to the defaults

http://support.microsoft.com/kb/313222/#appliesto

 

[Wazz]

Hey,

I really appreciate you taking the time to look for me, that is what I was looking for.
Thanks!!

 

[linney]

Thank you for the thanks.

 

[Wazz]

Hi all,

I would now like to add to this further please. I have been asked by my colleagues that I add power users - modify rights back to program files. Is there a risk in doing this from a security prespective? Would you do it?

Thanks
Wazz

 

[linney]

See the paragraph "File and folder special permissions" in the following article. You'll have to make your own mind up as to whether you want specific users to have such rights. The more rights granted, the more the risk of problems increase, but only you know your users and whether they require extra access to perform a required task.

How to set, view, change, or remove special permissions for files and folders in Windows XP

http://support.microsoft.com/kb/308419

Over View of All Groups in Windows XP

http://www.kellys-korner-xp.com/xp_groups.htm