summary
This article lists the default permissions on the drive after the use of NTFS file system is used for the first time. Some of these folders are hidden by default.
More information
The default NTFS permissions on the Windows 2000 public folder on the drive C are listed below. Note that this article assumes that Windows 2000 is installed on the drive C. If you install Windows 2000 on other drive numbers, replace the drive C in the folder location listed below to the corresponding drive number:
The default NTFS permission configured as a member server server:
C: / (Note: The installer does not change the permissions on the% systemDrive% because the Windows 2000 ACL inheritance model will try to configure all the subdirectory of the root directory. Administrator should configure according to their own system configuration and requirements. Root directory security.
C: / Program Files and
Administrators - Full Control Power Users - Read UserS - Read System - Full Control C: /% SystemRoot% Administrators - Full Control Creator / Owner - Full Control Everyone - Read Power Users - Change Users - Read System - Fully control C: /% systemroot% / addinsadministrators - Full Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control C: /% SystemRoot% / Connection WizardMinistrators - Full Control Creator / Owner - Full Control Power Users - Read System - Fully Control C: /% SystemRoot% / ConfigAdministrators - Fully Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control C: /% SystemRoot% / Cursorsadministrators - Full Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control C: /% SystemRoot% / DebugAdministrators - Full Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control C : /% Systemroot% / driver cacheadministrators - Full Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control C: /% SystemRoot% / Driver Cache / i386Administrators - Fully Control Creator / Owner - Fully Control Power Users - Change Users - Read System - Full Control C: /% SystemRoot% / FontsAdministrators - Full Control Creator / Owner - Full Control Power Users - More Change Users - Read System - Full Control C: /% SystemRoot% / Helpadministrators - Full Control Creator / Owner - Full Control Power Users - Change Users - Read Terminal Server User - Dedicated (RWX) System - Full Control C: /% SystemRoot% / Infadministrators - Full Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control C: /% SystemRoot% / Java and
Administrators - Full Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control C: /% SystemRoot% / Mediaadministrators - Fully Control Creator / Owner - Full Control Power Users - Change Users - Read System - Complete Control C: /% SystemRoot% / MsAgent and subfolder Administrators - Full Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control C: /% SystemRoot% / MSAPPS and subfolder Administrators - Full Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control C: /% SystemRoot% / MWW32 and Subfolder Administrators - Full Control Creator / Owner - Full Control Power Users - Changing Users - Read System - Full Control C: /% systemroot% / registrationAdministrators - Full Control Everyone - Read System - Full Control C: /% SystemRoot% / RepairadMinistrators - Fully Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control C: /% Systemroot% / security and
Administrators - Fully Control Creator / Owner - Fully Control Power Users - Read UserS - Read System - Full Control C: /% SystemRoot% / System32 / DTCLogAdministrators - Full Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control C: /% SystemRoot% / System32 / Exportadministrators - Fully Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control C: /% SystemRoot% / System32 / GroupPolicy and
Administrators - Full Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control C: /% SystemRoot% / System32 / WinsAdministrators - Full Control Creator / Owner - Full Control Power Users - Change Users - Read SYStem - Full Control C: /% SystemRoot% / Tempadministrators - Fully Control Creator / Owner - Full Control Power Users - Change Users - Special System - Full Control C: /% SystemRoot% / Twain_32Administrators - Fully Control Creator / Owner - Fully Control Power Uses - Change Users - Read System - Full Control C: /% SystemRoot% / WebAdministrators - Full Control Creator / Owner - Fully Control Power Users - Change Users - Read System - Full Control Any Other Folder Administrators - Fully Control Creator / Owner - Full Control Power Users - Change Users - Read System - Full Control The Default NTFS Permissions for Servers Configured to Daw Controller:
C: / (Note: The installer does not change the permissions on the% systemDrive% because the Windows 2000 ACL inheritance model will try to configure all the subdirectory of the root directory. Administrator should configure according to their own system configuration and requirements. Root directory security.
) C: / program files and
Administrators - Full Control Users - Reading EVERYONE - Read System - Full Control C: /% SystemRoot% Administrators - Fully Control Creat% - Full Control Everyone - Read Server Operators - Changing Authenticated Users - Read System - Full Control C : /% SystemRoot% / AddinsAdministrators - full control Creator / Owner - full control Server Operators - change the Authenticated Users - reading System - full control C: /% SystemRoot% / Connection WizardAdministrators - full control Creator / Owner - full control Server Operators - change the Authenticated Users - reading System - full control C: /% SystemRoot% / ConfigAdministrators - full control Creator / Owner - full control Server Operators - change the Authenticated Users - reading System - full control C: /% SystemRoot% / CursorsAdministrators - complete Control Creator / Owner - Full Control Server Operators - Changing Authenticated Users - Read System - Full Control C: /% SystemRoot% / DebugAdministrators - Full Control Creator / Owner - Full Control Server Operators - Changing Authenticated Users - Read System - Full Control C: /% systemroot% / driver cacheadministrators - Full Control Creator / Owner - Full Control Server Operators - Changing Authenticated Users - Read System - Full Control C: /% SystemRoot% / Driver Cache / i386Administrators - Full Control Creator / Owner - completely control Server Operators - Change Authenticated Users - Read System - Full Control C: /% SystemRoot% / Fontsadministrators - Full Control Creator / Owner - Full Control Server Operators - Changing Authenticated Users - Read System - Full Control C: /% SystemRoot% / Helpadministrators - Full Control Creator / Owner - Full Control Server Operators - Changing Authenticated Users - Read System - Full Control C: /% SystemRoot% / Infadministrators - Full Control Creator / Owner - Full Control Server Operators - Change Authenticated Users - Read System - Full Control C: /% SystemRoot% / Java and
Administrators - Full Control Creator / Owner - Full Control Server Operators - Change the Authenticated Users - reading System - Full Control C: /% SystemRoot% / MediaAdministrators - Full Control Creator / Owner - Full Control Server Operators - Change the Authenticated Users - reading System - Full Control C: /% SystemRoot% / Msagent and subfolder Administrators - Full Control Creator / Owner - Full Control Server Operators - Changing Authenticated Users - Read System - Full Control C: /% SystemRoot% / MSAPPS and subfolder Administrators - Full Control Creator / Owner - Fully Control Server Operators - Changing Authenticated Users - Read System - Full Control C: /% SystemRoot% / MWW32 and Subfolder Administrators - Full Control Creator / Owner - Full Control Server Operators - Changing Authenticated Users - Read Take SYSTEM - Full Control C: /% SystemRoot% / RegistrationAdministrators - Full Control CreatR / Owner - Full Control Server Operators - Changing Authenticated Users - Read System - Full Control C: /% SystemRoot% / RepairadMinistrators - Fully Control Creator / Owner - Full Control Server Operators - Changing Authenticated Users - Read System - Full Control C: /% SystemRoot% / Security and
Administrators - Fully Control Server Operators - Read Authenticated Users - Read System - Full Control C: /% SystemRoot% / SpeechMinistrators - Full Control Creator / Owner - Full Control Server Operators - Changing Authenticated Users - Read System - Full Control C: /% SystemRoot% / SystemAdministrators - full control Creator / Owner - full control Server Operators - change the Authenticated Users - reading System - full control C: /% SystemRoot% / System32Administrators - full control Creator / Owner - full control Server Operators - change Authenticated UserS - Read System - Full Control C: /% SystemRoot% / System32 / CaTrootadministrators - Fully Control Creator / Owner - Full Control Server Operators - Changing Authenticated Users - Read System - Full Control C: /% SystemRoot% / System32 / ComAdministrators - full control Creator / Owner - full control Server Operators - change the Authenticated Users - reading System - full control C: /% SystemRoot% / System32 / ConfigAdministrators - full control Creator / Owner - full control Server Operators - read Authenticated users - Read System - Full Control C: /% SystemRoot% / System32 / DHCPADMinistrators - Fully Control Creator / Owner - Full Control Server Operators - Read Authenticated Users - Read System - Full Control C: /% SystemRoot% / System32 / DR Ivers and
Administrators - Full Control Creator / Owner - Full Control Server Operators - Reading Authenticated Users - Read System - Full Control C: /% SystemRoot% / System32 / Iasadministrators - Fully Control Creator / Owner - Full Control Server Operators - Change System - Complete Control C: /% systemroot% / system32 / inetsrvadministrators - Full Control Creator / Owner - Full Control Server Operators - Changing Authenticated Users - Read System - Full Control C: /% SystemRoot% / System32 / MUI and
Administrators - Full Control Creator / Owner - Full Control Server Operators - Change the Authenticated Users - reading System - Full Control C: /% SystemRoot% / System32 / WinsAdministrators - Full Control Creator / Owner - Full Control Server Operators - Change the Authenticated Users - Reading Take SYSTEM - Full Control C: /% SystemRoot% / Tempadministrators - Full Control Creator / Owner - Full Control Server Operators - Change Authenticated Users - Special System - Full Control C: /% SystemRoot% / TWAIN_32ADMINISTROT% / TWAIN_32ADMINISTROT% / TWAIN_32ADMINISTROT% / TWAIN_32ADMINISTROT% Control Server Operators - Changing Authenticated Users - Read System - Full Control C: /% SystemRoot% / WebAdministrators - Full Control Creator / Owner - Fully Control Server Operators - Changing Authenticated Users - Read System - Full Control Other Folder Administrators - Full Control Creator / Owner - Full Control Server Operators - Change Authenticated Users - Read System - Full Control Note: These privileges do not apply to drives that are converted to NTFS using the Convert utility. The converted NTFS driver consists of all the files and folders of "Everyone" - Security Control ". Note: In Windows 2000, the C: / Root Catalog and all other hard drive root directory (such as D: /, E: /) are default "full control" for the Everyone special group. For additional information, click the article number below to see the article in the Microsoft Knowledge Base:
148437 Default NTFS Permissions in Windows NT
The information in this article applies to:
• Microsoft Windows 2000 Server • Microsoft Windows 2000 Advanced Server • Microsoft Windows 2000 Datacenter Server