Microsoft KB Archive/256569

From BetaArchive Wiki
Knowledge Base

Documents and Settings Folder Permissions Are Set Improperly When OemPreinstall=Yes Exists in the Answer File

Article ID: 256569

Article Last Modified on 2/28/2007


  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition

This article was previously published under Q256569


When you perform an unattended installation of Windows 2000 and the OemPreinstall=Yes parameter is in the answer file, the NTFS permissions are not set properly on the Documents and Settings folder. When Setup is finished, the folders (Documents and Settings and All Users and Default Users) have the permissions set to Everyone: FC (Full Control).

NOTE: The Users Profile folder (Administrator, Username1, and so on) have the correct NTFS permissions applied to them when they are created at the first logon attempt. Only the Default and All Users folders are affected.


To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

To work around this behavior, use Cacls to set the permissions on the Documents and Settings folder after Setup is finished. The default permissions are as follows:

Administrator = Full Control
Everyone = Read
Power Users = Read/modify
System = Full Control
Users = Read


Microsoft has confirmed that this is a problem in Microsoft Windows 2000. This problem was first corrected in Windows 2000 Service Pack 1.

Keywords: kbbug kbfix kbsetup kbwin2000sp1fix KB256569