Microsoft KB Archive/266118

= How to restore the default NTFS permissions for Windows 2000 =

Article ID: 266118

Article Last Modified on 10/30/2006

-

APPLIES TO


 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Professional Edition

-



This article was previously published under Q266118



SUMMARY
This article describes how to restore the default NTFS file system permissions for Microsoft Windows 2000. Windows 2000 includes Security Configuration templates that contain the default settings for NTFS permissions, for registry permissions, for default user rights, and for others.



MORE INFORMATION
You can use the Security Configuration templates in conjunction with the Security Configuration and Analysis snap-in from Microsoft Management Console (MMC) to restore the default security settings in Windows 2000. To do so, follow these steps:  Click Start, and then click Run. In the Open box, type mmc.exe, and then click OK. On the Console menu, click Add/Remove Snap-in. Click Add, and then double-click Security Configuration and Analysis. Click Close, and then click OK. Right-click Security Configuration and Analysis, and then click Open database. Create the following new database file:

%SystemRoot%\Security\Database\Aclrestore.sdb

You will be prompted to import a security template.</li> In the Look in list, click My Computer, and then double-click Local Disk (C:).</li> Double-click WINNT, and then double-click Inf.

Note By default, the Inf folder is hidden. To view the hidden Inf folder, follow these steps: <ol style="list-style-type: lower-alpha;"> On the desktop of your computer, double-click My Computer.</li> On the Tools menu, click Folder Options.</li> Click the View tab, click Show hidden files and folders, and then click OK.</li></ol> </li> Select one of the following templates (.inf files), as appropriate for your configuration, and then click Open: <ul> Defltwk.inf: Windows 2000 Professional</li> Defltsv.inf: Windows 2000 Server/Advanced Server non-domain controller</li> Defltdc.inf: Windows 2000 Server/Advanced Server domain controller</li></ul> </li> After you successfully import the template, follow the instructions in the right pane to configure your computer with the security settings that are contained in the template.</li></ol>

<div class="references_section">