Win2k Server Corruption?

[bob332]

win2k server, sp2 and all the latest drivers. whenever i change the the permissions on the security tab to let administrator have full access, and to cut everyone else of excep iusr, and when i log on as an administrator, i get notices that the hdd has been corrupted, then i will change the permissions back to everyone with full permissions and it ususally rectifies the problem. i will also get notices that i (the administrator) don't have permissions on certain files and also the registry. this is after i have put the permissions back to everyone with full access and check the inherit box to update all the child files. any ideas? the last time this happend, it got to the point that the computer wouldnt start and i had to llf, partition, format then install the os again. this happens only when i mess with the permissions, if i leave them alone as default, i have no problems

 

[millsy]

try uninstalling sp2 and see if it happens then

 

[Psychoholic]

I don't know where you are changing the permssions, but the system account may need access to the location you are changing.

 

[Saltin]

That's definetly what it is. If I had a nickle for every user who removed the system account from thier folders.............
The trick here, is that the "Everyone" group includes the system account. It's ok to take "Everyone" out, just remember to put the "System" in.

 

[bob332]

do i need anything else besides the system? what about service?

 

[Woodie]

Don't ACL from the root of the C drive down...it makes a mess.
Don't mess w/ any of the ACLs in the \winnt\ tree.
Don't mess w/ any of the ACLs in the \Documents and Settings\ tree.
System should have rights to the whole system, otherwise how can it do Virus scans or backups?

I almost forgot: Don't ACL or encrypt c:\autoexec.bat...it may cause your system not to boot.

You say "the security tab"...but the security tab on what object?

--Woodie

 

[bob332]

go to windows explorer and right click on a drive or folder, then select the security tab. that is where...

 

[Woodie]

What I said before...don't mess with ACLs at the C:\ drive level.

--Woodie

 

[Thor86]

You're best bet is to secure all Win2k partitions with only the Administrator and System with "Full Control" access. Most services built-in the operating system requires only these two accounts.

If you are running other applications or servers requiring certain user access priviliges, the just add them with the appropriate access controls in each folder/files. Just do a search on either Google.com or the MS Knowledge Base for any/all security accounts requirements.

As with all Window operating systems, even Win2k, make sure you reboot and test all access.