Discussion Locked

Remove from Everyone

0 helpful
9 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Is there a way to remove a group on Windows 2000 from the everyone group. I want to create a group with limited rights but 2000 adds the everyone group to its directories by default. I don't want to go into every directory to change this. I just want to give this group rights to specific folders.

9 replies

by tprinzo

I don't think you can remove a group from it, but you could use more than one group and achieve the same effect. all you users should belong to the domain users group, then you have the the group you want to give rights to. For those folders you give the group the desired rights and then block them from the domain users group.

Assusmeing everyone who then access your domain is a user, when they try to get those folders they are either blocked because they are in the domain users group, or allowed because they have membership in the group you gave rights to.

I hope that helps, I don't think I explained it clearly but let me know if you get the idea

by dhamilt0

2000 is set up to access folders with permission access. Folders with everyone will have to be changed if you want to restrict access. You can make them a member of a group and set policies to restrict them out of items.

by curlergirl

Because Win2K security is "top-down" instead of "bottom-up" as in NT 4.0, you can remove the Everyone group from the highest level and it will propagate down to all lower level folders. So, for example, if you want to remove the Everyone group fromthe entire drive, you can remove it on the security tab for the drive and it will be removed from all subfolders and files. Hope this helps!

by junething

Everyone Group is a build in Group, such as System Group. Everyone Group includes all your users, IE users, Terminal users, Admins, Power Users, etc. By design, all users are includes in Everyone Group. Best bet is to limit the permissions of theEveryone Group to "READ", so IE users can read your website (if u have one running).

Hope this helps

This discussion is closed to new replies.