I have inherited a network with 10 W2K servers and noticed that somehow over the last 2+ years some of the security settings on the sys vols have been changed. Most have domain users with read/execute, Dom admins and system have full control. I was recently on the phone with MS PSS and he said leaving the everyone group was actually fine. Can anybody back this tatemetn up or offer other suggestions.