Notes

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
======Tools/Utilities======
[[http://www.fajo.de/|FaJo XP File Security Extension (XP FSE) ]] allows a user of Windows XP Home to view/change the access rights on file system objects of NTFS file systems. The extension therefore provides the security tab known from Windows NT4, Windows 2000 and WIndows XP Pro at the property page of file system objects. \\

======Default NTFS ACLs======
Opgevraagd op een XP Home SP2 English installatie net na installatie:
<code>
C:\ 
BUILTIN\Administrators:(OI)(CI)F
NT AUTHORITY\SYSTEM:(OI)(CI)F
CREATOR OWNER:(OI)(CI)(IO)F
BUILTIN\Users:(OI)(CI)R
BUILTIN\Users:(CI)(special access:)
			FILE_APPEND_DATA

BUILTIN\Users:(CI)(IO)(special access:)
			FILE_WRITE_DATA

Everyone:R


c:\Documents and Settings 
NT AUTHORITY\SYSTEM:F
BUILTIN\Administrators:F
BUILTIN\Users:R
<Account Domain not found>R
Everyone:R
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F
BUILTIN\Administrators:(OI)(CI)(IO)F
BUILTIN\Users:(OI)(CI)(IO)(special access:)
			GENERIC_READ
			GENERIC_EXECUTE

<Account Domain not found>(OI)(CI)(IO)(special access:)
			GENERIC_READ
			GENERIC_EXECUTE

Everyone:(OI)(CI)(IO)(special access:)
			GENERIC_READ
			GENERIC_EXECUTE


c:\Program Files
BUILTIN\Users:R
BUILTIN\Users:(OI)(CI)(IO)(special access:)
			GENERIC_READ
			GENERIC_EXECUTE

BUILTIN\Administrators:F
BUILTIN\Administrators:(OI)(CI)(IO)F
NT AUTHORITY\SYSTEM:F
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F
BUILTIN\Administrators:F
CREATOR OWNER:(OI)(CI)(IO)F



C:\Documents and Settings\All Users 
NT AUTHORITY\SYSTEM:F
BUILTIN\Administrators:F
BUILTIN\Users:R
<Account Domain not found>(special access:)
			DELETE
			READ_CONTROL
			SYNCHRONIZE
			FILE_GENERIC_READ
			FILE_GENERIC_WRITE
			FILE_GENERIC_EXECUTE
			FILE_READ_DATA
			FILE_WRITE_DATA
			FILE_APPEND_DATA
			FILE_READ_EA
			FILE_WRITE_EA
			FILE_EXECUTE
			FILE_DELETE_CHILD
			FILE_READ_ATTRIBUTES
			FILE_WRITE_ATTRIBUTES

Everyone:R
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F
BUILTIN\Administrators:(OI)(CI)(IO)F
BUILTIN\Users:(OI)(CI)(IO)(special access:)
			GENERIC_READ
			GENERIC_EXECUTE

<Account Domain not found>(OI)(CI)(IO)(special access:)
			DELETE
			READ_CONTROL
			SYNCHRONIZE
			FILE_GENERIC_READ
			FILE_GENERIC_WRITE
			FILE_GENERIC_EXECUTE
			FILE_READ_DATA
			FILE_WRITE_DATA
			FILE_APPEND_DATA
			FILE_READ_EA
			FILE_WRITE_EA
			FILE_EXECUTE
			FILE_DELETE_CHILD
			FILE_READ_ATTRIBUTES
			FILE_WRITE_ATTRIBUTES

Everyone:(OI)(CI)(IO)(special access:)
			GENERIC_READ
			GENERIC_EXECUTE


C:\Documents and Settings\Default User
NT AUTHORITY\SYSTEM:F
BUILTIN\Administrators:F
BUILTIN\Users:R
<Account Domain not found>R
Everyone:R
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F
BUILTIN\Administrators:(OI)(CI)(IO)F
BUILTIN\Users:(OI)(CI)(IO)(special access:)
			GENERIC_READ
			GENERIC_EXECUTE


<Account Domain not found>(OI)(CI)(IO)(special access:)
			GENERIC_READ
			GENERIC_EXECUTE

Everyone:(OI)(CI)(IO)(special access:)
			GENERIC_READ
			GENERIC_EXECUTE


C:\Documents and Settings\LocalService 
NT AUTHORITY\LOCAL SERVICE:F
NT AUTHORITY\SYSTEM:F
BUILTIN\Administrators:F
NT AUTHORITY\LOCAL SERVICE:(OI)(CI)(IO)F
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F
BUILTIN\Administrators:(OI)(CI)(IO)F

C:\Documents and Settings\NetworkService 
NT AUTHORITY\NETWORK SERVICE:F
NT AUTHORITY\SYSTEM:F
BUILTIN\Administrators:F
NT AUTHORITY\NETWORK SERVICE:(OI)(CI)(IO)F
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F
BUILTIN\Administrators:(OI)(CI)(IO)F

C:\Documents and Settings\Owner 
BEHEER-D63CE9FE\Owner:F
NT AUTHORITY\SYSTEM:F
BUILTIN\Administrators:F
BEHEER-D63CE9FE\Owner:(OI)(CI)(IO)F
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F
BUILTIN\Administrators:(OI)(CI)(IO)F
</code>