Default Permissions for Installation of Small Business Server 4.5

ID: Q241966

The information in this article applies to:
  • Microsoft BackOffice Small Business Server version 4.5

SUMMARY

You can use this article as a guideline when verifying that permissions are set correctly on a computer running Small Business Server (SBS). You should apply these permissions during the installation process.


MORE INFORMATION

The information in this article is taken from pages 474 and 475 of the Microsoft BackOffice Small Business Server 4.5 Resource Kit.

Default Permissions Applied to Recipients

Permission Recipient Permission Level
Administrator Full
Creator/Owner Full
Server Operators Change
System Full

NOTE: For the SBS console and wizards to function correctly, you should not change the permissions for Administrator, Creator/Owner, Server Operators, and System.

Default Permissions Applied to Folders

Folder name Access control lists (ACLs) Contents
Company Shared Folder Domain Admins: Full
Domain Users: Full		 For use by end users.
User Shared Folders Domain Admins: Full
Domain Users: Read		 Contains the shared folders for each user.
FaxStore Domain Admins: Full
Domain Users: Change		 Contains incoming faxes.
End users need to read and delete files.
System Drive Domain Admins: Full
Domain Users: Read
%SystemDrive%\InetPub\WWWRoot\Intranet\SBSClientHelp Domain Admins: Full
Domain Users: Change		 SBS intranet client Help.
%SystemDrive%\InetPub\WWWRoot\Intranet Domain Admins: Full
Domain Users: Change		 SBS intranet.
%SystemDrive%\Winnt.sbs\Help\Sbs.srv\Htm Domain Admins: Full
Domain Users: Read		 Online Guide files.
%SystemDrive%\Winnt.sbs\Help\Sbs.srv\Misc Domain Admins: Full
Domain Users: Read		 Online Guide files.
%SystemDrive%\SmallBusiness Domain Admins: Full Contains Administrator files (wizards, dynamic link libraries, and so on).
%SystemDrive%\SmallBusiness\Clients Domain Admins: Full
Domain Users: Read		 Contains response and Setup folders.
%SystemDrive%\SmallBusiness\Clients\Response Domain Admins: Full
Domain Users: Full		 Folders for each client computer; contains information files used by OCManager during client Setup.
%SystemDrive%\SmallBuisness\Clients\Setup Domain Admins: Full
Domain Users: Read		 Contains I386 and Microsoft Windows 95 folders.
%SystemDrive%\SmallBuisness\Clients\Setup\I386 Domain Admins: Full
Domain Users: Read		 Setup files for Microsoft Windows NT clients.
%SystemDrive%\SmallBuisness\Clients\Setup\Win95 Domain Admins: Full
Domain Users: Read		 Setup files for Windows 95/98 clients.
%SystemDrive%\SmallBusiness\Floppy Domain Admins: Full Networking Setup files copied to disk by the Set Up Computer Wizard.
%SystemDrive%\SmallBusiness\HTML Domain Admins: Full Console.
%SystemDrive%\SmallBusiness\Template Domain Admins: Full Information files copied to response directories by the Set Up Computer Wizard.
%SystemDrive%\SmallBusiness\HTML\Logs Domain Admins: Full
Domain Users: Read



The default permissions for the %SystemDrive%\Winnt.sbs and %SystemDrive%\Winnt.sbs\System32 folders are not listed in the Microsoft BackOffice Small Business Server 4.5 Resource Kit.

The %SystemDrive%\Winnt.sbs folder should only show Everyone with Full Control. The %SystemDrive%\Winnt.sbs\System32 folder should have the following permissions set:
  • Administrators: Full


  • Creator/Owner: Full


  • Everyone: Change


  • Server Operators: Change


  • System: Full


Additional query words: smallbiz domain security

Keywords : kbenv
Version : winnt:4.5
Platform : winnt
Issue type : kbinfo


Last Reviewed: October 13, 1999
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.