File or folder User Group Recommended Permissions Inherited Method% AllUsersProfile% The folder of each user is included in the folder of the configuration file, usually in the C: / Documents and Settings / All Users, the Administrators full control inheritage system full control users read, execute % Allusersprofile% / Application Data contains status data for applications ADMINISTRATORS CREATOR OWNER Full Control Full Control (March Folders and Files) Inherited System Full Control Users Read, Perform users write (this file japo folder)% allUsersprofile% / Application Data / Microsoft contains status information for Microsoft applications ADMINISTRATORS fully controlled UserS read, execute system full control% allUsersprofile% / application data / microsoft / crypto / dss / machineKeys Administrators full control replacement SYSTEM full control users list the folder, Read the property, read the extended property, create a file, create folders, write properties, write extended properties, read permissions (only this folder)% allusersprofile% / Application Data / Microsoft / Crypto / RSA / MachineKeys Administrators complete Control Substitution SYSTEM Full Control Users lists folders, read properties, read extension properties, create files, create folders, write properties, write extension properties, read permissions (this folder only)% allUsersprofile% / Application Data / Microsoft / Dr Watson contains the folder of the Women's Business Application Error Log fully controls full control (only the child folders and files) Replace System Users fully controlled read, execute users Traverse folder, create files, create folders (only children folders and files)% allusersprofile% / application data / microsoft / drwatson / drick log log Note: This setting is only in DRWTSN32.log file It is meaningful after being created. For security, we should not take risks to save this log file where you can access it, Drwtsn32.exe applications can run themselves and save files to a specific security location when the system crashes.
Administrators Full Control replace CREATOR OWNER Full Control (only sub-folders and files) SYSTEM Full Control Users modify% AllUsersProfile% / Application Data / Microsoft / HTML Help Administrators SYSTEM Full Control Full Control replace Users full control% AllUsersProfile% / Application Data / Microsoft / Media INDEX Administrators Full Control Replace System Full Control Users Users Read, Execute, Create Files, Create Folders, Write Properties, Write Extensions Properties, Read Permissions (This Folder) Write (this file and subfolders only) )% Allusersprofile% / documents Note: When viewing the% allusersprofile% folder in the Explorer, the Documents subfolder will appear as "Share Document" Administrators CreatR Owner fully controlled complete control (only children folders and files) replacement System users fully controlled read, write attributes (only this folder and subfolders)% allUsersprofile% / Documents / Desktop.ini Administrators SYSTEM fully controls full control replace users Read, execute% allusersprofile% / DRM ignore ignore% ProgramFiles% Used Install the folder of the application, by default, usually% systemDrive% / program files administrators Creator Owner fully controls full control (only single folders and files) Replace SystemDrive Users read, execute% systemDrive% to install Windows XP Hard disk partition, including important system files required to start the system, the Administrators Creator Owner System Users full control Full Control (only children folders and files) fully controlled read, perform inheritance% systemDrive% / autoexec.bat c: /autoec.bat Some legacy DOS applications needed, DOS application actual initialization file is% systemroot% /system32/autoexec.nt Administrators completely controls UserS read, execute systemDrive% / boot.ini c: /boot.ini boot menu Administrators fully controlled SYSTEM fully controlled% systemDrive% / config.sys C: / config .sys Some legacy DOS applications need path,
The actual initialization file of the DOS application is% systemroot% / system32 / config.nt Administrators full control replaces users read, execute SystemDrive% / Documents and settings Save user profile folder Administrators full control inheritance System fully control users Read, execute% systemDrive% / documents and settings / administrator saves the default administrator profile folder Administrators Full Control SyntemiTem Full Control% SystemDrive% / Documents and Settings / Default User Contains the default desktop for users to log in Folder Administrators System System fully controlled fully controlled Users read, execute% systemDrive% / io.sys as empty files for DOS file placeholders, are used to determine the location Administrators full control System fully controlled users Read, execute% systemdrive% / msdos.sys empty files for DOS file placeholders, are used to determine the location of the system partitions ADMINISTRATORS fully controlled SYSTEM fully controlled users read, execute the drive of the% systemDrive% / ntbootd.sys SCSI device Program, as a related record in the SCSI device or boot.ini file is to use Administrators full control to replace SystemDrive% / NTDetect.com C: /NTDetect.com to detect hardware files in Windows XP boot to detect hardware file Administrators full control replacement SystemDrive% / NTLDR C: / NTLDR Windows XP Operators PROTORSTRITY SYSTEM Full Control% SystemDrive% / System Volume INFORMATION You can only be used by SystemDrive% / System Volume INFORMATION. The folder of the Windows XP operating system is installed by SYSTEM. For newly installed Windows XP, the default file clip name is WINDOWS. Upgrade Windows XP will take the old system's system folder name, if it is usually called Winnt from Windows NT 4.0 or 2000, it is usually called Windows from Windows 9X.
Administrators fully controlled Creator Owner Full Control (only children folders and files) System completely controls users read, execute% SystemRoot% / $ NTSERVICEPACKUNSTALL $ contains backup to uninstall service packs The backup of the old version system files needed to replace SystemIistrs fully controlled SYSTEM Full control% SystemRoot% / CSC contains all users of this unit, CSC means "Client Side Caching" Administrators full control replacement% systemroot% / debug contains a lot of log files Administrators Creator Owner completely control full control (only Folders and files) Inherit SystemRoot% / debug / usermode contains the log administrators system fully controlled complete control inherits the user traversal folder, lists folders, and creates files ( Only this folder), write data, additional data (file only)% systemroot% / debug / usermode / useernv.log policy application log file Administrators System full control full control replace users write data, additional data% systemroot% / Installer Administrators System Full Control Full Control Replace User Read, Performing% SystemRoot% / Offline Web Pages Used to Save Offline Browse The Folder Ignore Ignore% SystemRoot% / Prefetch contains pre-read cache file Administrators full control (only Folder) Replace SYSTEM Full Control (This folder only)% systemroot% / regedit.exe Registry Editor Administrators fully controlled Replacing the SYSTEM Full Control% SystemRoot% / Registration Saves the CLB (Component Load Balancing, Component Load Balancing) Registration Full Control (this folder and file only) (only this file only) Clips and files) Replace users Read (only this folder and file)% systemroot% / registration / crmlog administrators fully controlled Creat Owner full control (only children folders and files) SYSTEM fully controls the user traversal folder, list folders , Read attributes, read extension properties, create files, read licenses (this folder only), read data, write data, additional data, write properties, write extension properties, delete% systemroot% / repair Save SAM database backups required for system fixes and folders for other important registry and system file backups.
Administrators fully controlled SYSTEM Full Control% SystemRoot% / Security Contains Security Templates and Analytical Database Administrators CreatR Owner Full Control Full Control (March Folders and Files) Replace System Full Control% SystemRoot% / System32 Contains core system file Administrators Creator Owner Owner Fully Control Full Control (March Folders and Files) Replace System Full Control Users Read, Perform% SystemRoot% / System32 / ARP.EXE Display and Modify IP to MAC Address ARP (Address Resolution Protocol) Convert Table Administrators full control replace System Full Control% SystemRoot% / System32 / at.exe Preset A program Runs ADMINISTRATORS Full Control Replacement System Full Control% SystemRoot% / System32 / Ciadv.msc Index Service Universal Console Administrators Full Control Replace SYSTEM Full Control % SystemRoot% / System32 / Com / COMEXP.MSC Component Service Universal Console Administrators Full Control Replace System Full Control% SystemRoot% / System32 / Compmgmt.msc Computer Management Universal Console Administrators fully controlled SYSTEM full control% systemRoot% / system32 / Config Contains Registry File and System Log Administrators Full Control Replacement System Full Control% SystemRoot% / System32 / Devmgmt.msc Device Manager General Console Administrators Full Control Systs System Full Control% SystemRoot% /system32/dfrg.msc Disk Defragmenter Universal Console Administrators Full Control SYSTEM Full Control replace% SystemRoot% / system32 / diskmgmt.msc Universal Disk Management Console Administrators Full Control SYSTEM Full Control replace% SystemRoot% / system32 / dllcache contains A copy of the protected system file, these files can be used by the system file inspector to recover the damaged or modified system file Administrators fully controlled Creator Owner full control (only the child folders and files)
SystemRoot% / System32 / EventVWR.MSC Event Viewer Universal Console Administrators Full Control Replace System Full Control% SystemRoot% / System32 / FSMGMT.MSC Shared Folder Universal Console Administrators fully controlled System fully controlled% systemRoot% /system32/gpedit.msc common group policy console Administrators SYSTEM full control full control replace% SystemRoot% / system32 / group policy group policy object save folder Administrators full control Authenticated Users inherit read, execute SYSTEM full control% SystemRoot% / system32 / IAS contains the database administrators required by the Internet Authentication Service Replace Creator Owner fully controls SystemRoot% SystemRoot% / System32 / LusRMGR.MSC Local User and Group General Console Administrators fully controlled SYSTEM full control% systemRoot% / system32 / MSDTC includes Microsoft Distributed Processing Coordination Files, the Administrators required by the Distribution Server Replace NetWork Service Read, Write, Execute System All-Control% SystemRoot% / System32 / NBTSTAT.EXE Display Protocol Status and the current TCP / IP connection .
Administrators Full Control Substitution SYSTEM Full Control% SystemRoot% / System32 / Netsh.exe Command Line Network Configuration Tool Administrators Fully Control SystsTemTemTemTeM fully controlled% SystemRoot% / system32 / netstat.exe Display protocol status and current TCP / IP connection Administrators full control full control SYSTEM substituted% SystemRoot% / system32 / nslookup.exe DNS information display control Administrators full full control SYSTEM substituted% SystemRoot% / system32 / Ntbackup.exe backup program files Administrators full control SYSTEM full control substituted% SystemRoot% / system32 / NTMSData available The default save location of the mobile storage database ADMINISTRATORS fully controlled inheritance system full control% systemroot% / system32 / ntmsmgr.msc removable storage Universal console Administrators fully controlled System fully controlled% systemroot% / system32 / ntmsoprq.msc mobile storage operation request universal Console Administrators Full Control Replace System Full Control% SystemRoot% / System32 / PerfMon.msc Performance Monitor Universal Console Administrators Full Control Replacement System Full Control% SystemRoot% / System32 / RCP.exe Used Programs for Execute Remote Procedures ADMINISTRATORS Control Substitution SYSTEM Full Control% SystemRoot% / System32 / Reg.exe Used to Edit and Query Registry Command Line Tool Administrators fully controlled SYSTEM full control % Systemroot% / system32 / regedt32.exe points to regedit.exe, in previous versions of Windows NT (including Windows 2000) this is another Registry Editor Administrators full control replaces SYSTEM full control% systemroot% / system32 / regini.exe Command line tools for editing and query registry, Administrators fully controlled SYSTEM full control% systemroot% / system32 / rexec.exe for executing remote call (Remote Calls) Programs for remote call (Remote calls) ADMINISTRATORS fully controlled System fully controlled% systemroot% / system32 /route.exe Program for operating network routing tables ADMINISTRATORS fully controlled SYSTEM full control% systemroot% / system32 / RSH.EXE Execute Remote Shell (Remote Shell)
