Default has a write-right restricted directory
C: / WinNT / TEMP
C: / Winnt / System32 / InetSRV / DATA
C: / Winnt / Tasks
File or folder User Group Recommended Permissions Inherited Method% AllUsersProfile% The folder of each user is included in the folder of the configuration file, usually in the C: / Documents and Settings / All Users, the Administrators full control inheritage system full control users read, execute % Allusersprofile% / Application Data contains status data for applications ADMINISTRATORS CREATOR OWNER Full Control Full Control (March Folders and Files) Inherited System Full Control Users Read, Perform users write (this file japo folder)% allUsersprofile% / Application Data / Microsoft contains status information for Microsoft applications ADMINISTRATORS fully controlled UserS read, execute system full control% allUsersprofile% / application data / microsoft / crypto / dss / machineKeys Administrators full control replacement SYSTEM full control users list the folder, Read the property, read the extended property, create a file, create folders, write properties, write extended properties, read permissions (only this folder)% allusersprofile% / Application Data / Microsoft / Crypto / RSA / MachineKeys Administrators complete Control Substitution SYSTEM Full Control Users lists folders, read properties, read extension properties, create files, create folders, write properties, write extension properties, read permissions (this folder only)% allUsersprofile% / Application Data / Microsoft / Dr Watson contains the folder of the Huasheng doctor app error log, the application, the application, the application, the application, the ADMINISTRATORS CREATOR OWNER fully controls full control (only the subfolders and text) Parts Replace System Users full control read, execute the user traversal folder, create files, create folders (only children folders and files)% allusersprofile% / application data / microsoft / drwatson / drowsn32.logTSN32.log Log Note: This setting is only meaningful after the DRWTSN32.log file is created. For security, we should not take risks to save this log file where you can access it, Drwtsn32.exe applications can run themselves and save files to a specific security location when the system crashes.
Administrators Full Control replace CREATOR OWNER Full Control (only sub-folders and files) SYSTEM Full Control Users modify% AllUsersProfile% / Application Data / Microsoft / HTML Help Administrators SYSTEM Full Control Full Control replace Users full control% AllUsersProfile% / Application Data / Microsoft / Media INDEX Administrators Full Control Replace System Full Control Users Users Read, Execute, Create Files, Create Folders, Write Properties, Write Extensions Properties, Read Permissions (This Folder) Write (this file and subfolders only) )% Allusersprofile% / documents Note: When viewing the% allusersprofile% folder in the Explorer, the Documents subfolder will appear as "Share Document" Administrators CreatR Owner fully controlled complete control (only children folders and files) replacement System users fully controlled read, write attributes (only this folder and subfolders)% allUsersprofile% / Documents / Desktop.ini Administrators SYSTEM fully controls full control replace users Read, execute% allusersprofile% / DRM ignore ignore% ProgramFiles% Used Install the folder of the application, by default, usually% systemDrive% / program files administrators Creator Owner fully controls full control (only single folders and files) Replace SystemDrive Users read, execute% systemDrive% to install Windows XP Hard disk partition, containing the important system files required to start the system ADM Inistrators Creator Owner System Users Full Control Full Control (only children folders and files) fully controlled read, perform inheritance% systemDrive% / autoexec.bat c: /autoexec.bat Some legacy DOS application needs path, DOS application actual Initialization file is% systemroot% / system32 / autoexec.nt Administrators fully controlled UserS read, execute SystemDrive% / boot.ini c: /boot.ini boot menu administrators fully controlled SYSTEM full control% systemDrive% / Config.sys c: /config.sys Some legacy DOS applications need path,
The actual initialization file of the DOS application is% systemroot% / system32 / config.nt Administrators full control replaces users read, execute SystemDrive% / Documents and settings Save user profile folder Administrators full control inheritance System fully control users Read, execute% systemDrive% / documents and settings / administrator saves the default administrator profile folder Administrators Full Control SyntemiTem Full Control% SystemDrive% / Documents and Settings / Default User Contains the default desktop for users to log in Folder Administrators System System fully controlled fully controlled Users read, execute% systemDrive% / io.sys as empty files for DOS file placeholders, are used to determine the location Administrators full control System fully controlled users Read, execute% systemdrive% / msdos.sys empty files for DOS file placeholders, are used to determine the location of the system partitions ADMINISTRATORS fully controlled SYSTEM fully controlled users read, execute the drive of the% systemDrive% / ntbootd.sys SCSI device Program, as a related record in the SCSI device or boot.ini file is to use Administrators full control to replace SystemDrive% / NTDetect.com C: /NTDetect.com to detect hardware files in Windows XP boot to detect hardware file Administrators full control replacement SYSTEM Full Control% SystemDrive% / NTLDR C: / NTLDR Windows XP Operating System Boot File Administrators Fully Control Syntemi System Full Control% SystemDrive% / System Volume Information can only be used by SYSTEM access ignore the% systemroot% installed Windows XP operating system folder For new installed Windows XP, the default is called Windows. Upgrade Windows XP will take the old system's system folder name, if it is usually called Winnt from Windows NT 4.0 or 2000, it is usually called Windows from Windows 9X.
Administrators fully controlled Creator Owner Full Control (only children folders and files) System completely controls users read, execute% SystemRoot% / $ NTSERVICEPACKUNSTALL $ contains backup to uninstall service packs The backup of the old version system files needed to replace SystemIistrs fully controlled SYSTEM Full control% SystemRoot% / CSC contains all users of this unit, CSC means "Client Side Caching" Administrators full control replacement% systemroot% / debug contains a lot of log files Administrators Creator Owner completely control full control (only Folders and files) Inherit SystemRoot% / debug / usermode contains the log administrators system fully controlled complete control inherits the user traversal folder, lists folders, and creates files ( Only this folder), write data, additional data (file only)% systemroot% / debug / usermode / useernv.log policy application log file Administrators System full control full control replace users write data, additional data% systemroot% / Installer Administrators System Full Control Full Control Replace User Read, Performing% SystemRoot% / Offline Web Pages Used to Save Offline Browse The Folder Ignore Ignore% SystemRoot% / Prefetch contains pre-read cache file Administrators full control (only Folder) Replace SYSTEM Full Control (This folder only)% s YSTEMROOT% / regedit.exe Registry Editor ADMINISTRATORS Full Control Replace SYSTEM Full Control% SystemRoot% / Registration Save CLB (Component Load Balancing, Component Load Balancing) Registration Folder ADMINISTRATORS SYSTEM Full Control ( Only this folder and files) Full Control (this folder and file only) Replace users Read (this folder and file only)% systemroot% / registration / crmlog administrators fully controlled Creator Owner full control (only children folders and file only) SYSTEM fully controls the userS traversal folder, lists folders, read properties, read extension properties, create files, read licenses (this folder), read data, write data, additional data, write properties , Write an extended attribute, delete% systemroot% / repa, save the SAM database backup required for system fixes, and other important registry and system file backup folders.
Administrators fully controlled SYSTEM Full Control% SystemRoot% / Security Contains Security Templates and Analytical Database Administrators CreatR Owner Full Control Full Control (March Folders and Files) Replace System Full Control% SystemRoot% / System32 Contains core system file Administrators Creator Owner Owner Fully Control Full Control (March Folders and Files) Replace System Full Control Users Read, Perform% SystemRoot% / System32 / ARP.EXE Display and Modify IP to MAC Address ARP (Address Resolution Protocol) Convert Table Administrators full control replace System Full Control% SystemRoot% / System32 / at.exe Preset A program Runs ADMINISTRATORS Full Control Replacement System Full Control% SystemRoot% / System32 / Ciadv.msc Index Service Universal Console Administrators Full Control Replace SYSTEM Full Control % SystemRoot% / System32 / Com / COMEXP.MSC Component Service Universal Console Administrators Full Control Replace System Full Control% SystemRoot% / System32 / Compmgmt.msc Computer Management Universal Console Administrators fully controlled SYSTEM full control% systemRoot% / system32 / Config contains registry files and system log Administrators full control replaces SYSTEM full control% systemroot% / system32 / devmgmt.msc device manager universal console Administrators Full Control SYSTEM Full Control replace% SystemRoot% / system32 / dfrg.msc Disk Defragmenter Universal Console Administrators Full Control SYSTEM Full Control replace% SystemRoot% / system32 / diskmgmt.msc Universal Disk Management Console Administrators Full Control SYSTEM Full replace Control% SystemRoot% / System32 / DLLCache contains a copy of the protected system file that can be used by the system file inspector to recover the damaged or modified system file Administrators complete control replaces Creat Owner complete control (only the sub-folder and file)
SystemRoot% / System32 / EventVWR.MSC Event Viewer Universal Console Administrators Full Control Replace System Full Control% SystemRoot% / System32 / FSMGMT.MSC Shared Folder Universal Console Administrators fully controlled System fully controlled% systemRoot% /system32/gpedit.msc common group policy console Administrators SYSTEM full control full control replace% SystemRoot% / system32 / group policy group policy object save folder Administrators full control Authenticated Users inherit read, execute SYSTEM full control% SystemRoot% / system32 / IAS contains the database administrators required by the Internet Authentication Service Replace Creator Owner fully controls SystemRoot% SystemRoot% / System32 / LusRMGR.MSC Local User and Group General Console Administrators fully controlled SYSTEM full control% systemRoot% / system32 / MSDTC includes Microsoft Distributed Processing Coordination Files, the Administrators required by the Distribution Server Replace NetWork Service Read, Write, Execute System All-Control% SystemRoot% / System32 / NBTSTAT.EXE Display Protocol Status and the current TCP / IP connection .
Administrators Full Control Substitution SYSTEM Full Control% SystemRoot% / System32 / Netsh.exe Command Line Network Configuration Tool Administrators Fully Control SystsTemTemTemTeM fully controlled% SystemRoot% / system32 / netstat.exe Display protocol status and current TCP / IP connection Administrators full control full control SYSTEM substituted% SystemRoot% / system32 / nslookup.exe DNS information display control Administrators full full control SYSTEM substituted% SystemRoot% / system32 / Ntbackup.exe backup program files Administrators full control SYSTEM full control substituted% SystemRoot% / system32 / NTMSData available The default save location of the mobile storage database ADMINISTRATORS fully controlled inheritance system full control% systemroot% / system32 / ntmsmgr.msc removable storage Universal console Administrators fully controlled System fully controlled% systemroot% / system32 / ntmsoprq.msc mobile storage operation request universal Console Administrators Full Control Replace System Full Control% SystemRoot% / System32 / PerfMon.msc Performance Monitor Universal Console Administrators Full Control Replacement System Full Control% SystemRoot% / System32 / RCP.exe Used Programs for Execute Remote Procedures ADMINISTRATORS Control replacement system full control% systemroot% / system32 / reg.exe for Edit and query registry command line tool Administrators fully controlled SYSTEM full control% systemroot% / system32 / regedt32.exe pointing to regedit.exe, in previous versions of Windows NT (including Windows 2000) This is another Registry Editor Administrators Full Control Replace System Full Control% SystemRoot% / System32 / Regini.exe For Edit and Query Registry Command Line Tool Administrators Full Control Replacement System Full Control% SystemRoot% / System32 / Rexec.exe Used to Perform Remote Call (Remote) Calls' program ADMINISTRATORS fully controlled System fully controlled% systemroot% / system32 / route.exe Used to operate network routing table Used program Administrators fully controlled System fully controlled% systemroot% / system32 / rsh.exe Execute remote housings (Remote shell )
