I locked down our windows 2000 web server using the minimum file system permissions recommendations. The users could not access any applications (received page not found in browser window) from the web server. I tracked the problem to the C:\WINNT\SYSTEM32 folder. I gave Administrators, Creator Owner, and System full control. I gave the group Everyone read permissions. I had removed the users and power users groups. Well, I ended up putting the USERS GROUP back with full control. The users are able to bring up applications on the web server. Why do I need the users group instead of the everyone group. I do not want the users group to have full control. What’s the minimum I can give the users groups in order for apps to be accessed.
