Microsoft KB Archive/256569
Article ID: 256569
Article Last Modified on 2/28/2007
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Professional Edition
This article was previously published under Q256569
When you perform an unattended installation of Windows 2000 and the OemPreinstall=Yes parameter is in the answer file, the NTFS permissions are not set properly on the Documents and Settings folder. When Setup is finished, the folders (Documents and Settings and All Users and Default Users) have the permissions set to Everyone: FC (Full Control).
NOTE: The Users Profile folder (Administrator, Username1, and so on) have the correct NTFS permissions applied to them when they are created at the first logon attempt. Only the Default and All Users folders are affected.
To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
260910 How to Obtain the Latest Windows 2000 Service Pack
To work around this behavior, use Cacls to set the permissions on the Documents and Settings folder after Setup is finished. The default permissions are as follows:
Administrator = Full Control
Everyone = Read
Power Users = Read/modify
System = Full Control
Users = Read
Microsoft has confirmed that this is a problem in Microsoft Windows 2000. This problem was first corrected in Windows 2000 Service Pack 1.
Keywords: kbbug kbfix kbsetup kbwin2000sp1fix KB256569