From: SMTP%"woodardk@netcom.com" 10-AUG-1996 08:06:54.88 To: ntsecurity@iss.net, hai@morgan.com CC: Subj: Re: [NTSEC] How to remove the Everyone Group On newly setup computers, you could use the NTSEC utilities to apply a set of saved permissions across a filesystem. The way to use it is to set up the permissions on files you want to restore later (such as on %SystemRoot%), run SAVEACL which will save those perms to a file. When you set up additional computers, just run RESTACL to reapply the default set of permissions from the file. For instance: saveacl -r c:\winnt35 winnt35.acl - save permissions to winnt35.acl restacl winnt35.acl - restore permissions This won't help with share permissions though, and I don't think there is a way to remove BUILTIN groups. You can get the NTSEC utilities on ftp://ftp.netcom.com/pub/wo/woodardk/. -Keith > Author: hai@morgan.com (Hai Ngo) > Date: 8/5/96 9:47 AM > > > Hello, > > How would one solve the Default EVERYONE Group with full access in an automatic > firmwide matter? > > It is a mess to have to remove or reset this EVERYONE group each time we build > a computer or each time we create a share. > > Can we manipulate the Registry in anyway to solve this problem? Can we remove > EVERYONE Group full access on the entire drive once to solve this problem? > > Thank you, > > Hai Ngo > ================== RFC 822 Headers ================== Return-Path: owner-ntsecurity@iss.net Received: by galaxy.zko.dec.com (UCX V4.0-10B, OpenVMS V6.2 VAX); Sat, 10 Aug 1996 08:06:51 -0400 Received: from phoenix.iss.net by mail11.digital.com (8.7.5/UNX 1.2/1.0/WV) id IAA18207; Sat, 10 Aug 1996 08:03:51 -0400 (EDT) Received: (from majordom@localhost) by phoenix.iss.net (8.6.13/8.6.12) id LAA01653 for nt-out; Fri, 9 Aug 1996 11:29:09 -0400 Received: from netcom23.netcom.com (woodardk@netcom23.netcom.com [192.100.81.137]) by phoenix.iss.net (8.6.13/8.6.12) with ESMTP id JAA23882 for ; Tue, 6 Aug 1996 09:19:42 -0400 Received: (from woodardk@localhost) by netcom23.netcom.com (8.6.13/Netcom) id GAA16496; Tue, 6 Aug 1996 06:20:14 -0700 Date: Tue, 6 Aug 1996 06:20:13 -0700 (PDT) From: Keith Woodard X-Sender: woodardk@netcom23 To: ntsecurity@iss.net, hai@morgan.com Subject: Re: [NTSEC] How to remove the Everyone Group In-Reply-To: <20743fb0@cclink.frb.gov> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ntsecurity@iss.net Errors-To: majordomo-errors@iss.net Precedence: bulk Reply-To: Keith Woodard