To lockdown a windows 2000 terminal server, should I remove full control from the group everyone on the %systemdrive%.