Windows Forum

Ask something
Discussion Locked

SYSVOL & NETLOGON shares

0 helpful
1 reply

by fgiffone

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
My K-12 student users can SEE and EXPAND the SYSVOL & NETLOGON tree in the domain. Can they AMEND or DELETE these items if they so choose. I would rather they DO NOT have access to these shares. If I change the default permissions, will it effect my Active Directory structure?

1 reply

by bjorn.tore

Hi.

This is not an issue.
Everyone will/must be able to read the netlogon and the sysvol share.

Netlogon is used for logonscripts and such.
Sysvol is for Group policies.
Without read access to these folders, user logon/computer boot will be slow and unpredictable.

Users do not have access to delete/detroy anything in these folders with the default security settings

This discussion is closed to new replies.