Power Users Can Modify Common Groups (149091)



The information in this article applies to:

  • Microsoft Windows NT Workstation 3.5
  • Microsoft Windows NT Workstation 3.51
  • Microsoft Windows NT Workstation 4.0
  • Microsoft Windows NT Server 3.5
  • Microsoft Windows NT Server 3.51
  • Microsoft Windows NT Server 4.0

This article was previously published under Q149091

SYMPTOMS

Only administrators should be able to modify common groups in Windows NT Server and Workstation. However, members of the Power Users group are able to add, delete, and modify icons in common groups. Power Users can also create new common groups and delete existing common groups.

This problem does not occur on NT 4.0 Workstation or Server when installed on an NTFS partition. Default permissions on the %systemroot%\profiles \all users directory which defines common groups and icons grants full control to the Administrator and System acconts with read-only access to the everyone group. NT 4.0 Workstation and Server installed on a fat partition are subject to the same limitation as 3.5X.

WORKAROUND

To resolve this problem, upgrade to Windows NT Workstation and Server version 4.0 with on an NTFS partition..

You can work around this problem by not using the Power Users group.

STATUS

Microsoft has confirmed this to be a problem in Windows NT versions 3.50 and 3.51. This problem was corrected in Windows NT Workstation or Server version 4.0 when installed on NTFS partitions.

Modification Type:MajorLast Reviewed:5/7/2003
Keywords:KB149091