Article ID: 241966
Article Last Modified on 10/15/1999
APPLIES TO
- Microsoft BackOffice Small Business Server 4.5
This article was previously published under Q241966
SUMMARY
You can use this article as a guideline when verifying that permissions are set correctly on a computer running Small Business Server (SBS). You should apply these permissions during the installation process.
MORE INFORMATION
The information in this article is taken from pages 474 and 475 of the Microsoft BackOffice Small Business Server 4.5 Resource Kit.
Default Permissions Applied to Recipients
| Permission Recipient | Permission Level |
|---|---|
| Administrator | Full |
| Creator/Owner | Full |
| Server Operators | Change |
| System | Full |
NOTE: For the SBS console and wizards to function correctly, you should not change the permissions for Administrator, Creator/Owner, Server Operators, and System.
Default Permissions Applied to Folders
| Folder name | Access control lists (ACLs) | Contents |
|---|---|---|
| Company Shared Folder | Domain Admins: Full Domain Users: Full |
For use by end users. |
| User Shared Folders | Domain Admins: Full Domain Users: Read |
Contains the shared folders for each user. |
| FaxStore | Domain Admins: Full Domain Users: Change |
Contains incoming faxes. End users need to read and delete files. |
| System Drive | Domain Admins: Full Domain Users: Read |
|
| %SystemDrive%\InetPub\WWWRoot\Intranet\SBSClientHelp | Domain Admins: Full Domain Users: Change |
SBS intranet client Help. |
| %SystemDrive%\InetPub\WWWRoot\Intranet | Domain Admins: Full Domain Users: Change |
SBS intranet. |
| %SystemDrive%\Winnt.sbs\Help\Sbs.srv\Htm | Domain Admins: Full Domain Users: Read |
Online Guide files. |
| %SystemDrive%\Winnt.sbs\Help\Sbs.srv\Misc | Domain Admins: Full Domain Users: Read |
Online Guide files. |
| %SystemDrive%\SmallBusiness | Domain Admins: Full | Contains Administrator files (wizards, dynamic link libraries, and so on). |
| %SystemDrive%\SmallBusiness\Clients | Domain Admins: Full Domain Users: Read |
Contains response and Setup folders. |
| %SystemDrive%\SmallBusiness\Clients\Response | Domain Admins: Full Domain Users: Full |
Folders for each client computer; contains information files used by OCManager during client Setup. |
| %SystemDrive%\SmallBuisness\Clients\Setup | Domain Admins: Full Domain Users: Read |
Contains I386 and Microsoft Windows 95 folders. |
| %SystemDrive%\SmallBuisness\Clients\Setup\I386 | Domain Admins: Full Domain Users: Read |
Setup files for Microsoft Windows NT clients. |
| %SystemDrive%\SmallBuisness\Clients\Setup\Win95 | Domain Admins: Full Domain Users: Read |
Setup files for Windows 95/98 clients. |
| %SystemDrive%\SmallBusiness\Floppy | Domain Admins: Full | Networking Setup files copied to disk by the Set Up Computer Wizard. |
| %SystemDrive%\SmallBusiness\HTML | Domain Admins: Full | Console. |
| %SystemDrive%\SmallBusiness\Template | Domain Admins: Full | Information files copied to response directories by the Set Up Computer Wizard. |
| %SystemDrive%\SmallBusiness\HTML\Logs | Domain Admins: Full Domain Users: Read |
The default permissions for the %SystemDrive%\Winnt.sbs and %SystemDrive%\Winnt.sbs\System32 folders are not listed in the Microsoft BackOffice Small Business Server 4.5 Resource Kit.
The %SystemDrive%\Winnt.sbs folder should only show Everyone with Full Control. The %SystemDrive%\Winnt.sbs\System32 folder should have the following permissions set:
- Administrators: Full
- Creator/Owner: Full
- Everyone: Change
- Server Operators: Change
- System: Full
Additional query words: smallbiz domain security
Keywords: kbinfo kbenv KB241966
