Default Permissions for Installation of Small Business Server 4.5 (241966)


The information in this article applies to:

  • Microsoft BackOffice Small Business Server 4.5
This article was previously published under Q241966

SUMMARY

You can use this article as a guideline when verifying that permissions are set correctly on a computer running Small Business Server (SBS). You should apply these permissions during the installation process.

MORE INFORMATION

The information in this article is taken from pages 474 and 475 of the Microsoft BackOffice Small Business Server 4.5 Resource Kit.

Default Permissions Applied to Recipients

Permission RecipientPermission Level
AdministratorFull
Creator/OwnerFull
Server OperatorsChange
SystemFull

NOTE: For the SBS console and wizards to function correctly, you should not change the permissions for Administrator, Creator/Owner, Server Operators, and System.

Default Permissions Applied to Folders

Folder nameAccess control lists (ACLs)Contents
Company Shared FolderDomain Admins: Full
Domain Users: Full		For use by end users.
User Shared FoldersDomain Admins: Full
Domain Users: Read		Contains the shared folders for each user.
FaxStoreDomain Admins: Full
Domain Users: Change		Contains incoming faxes.
End users need to read and delete files.
System DriveDomain Admins: Full
Domain Users: Read
%SystemDrive%\InetPub\WWWRoot\Intranet\SBSClientHelpDomain Admins: Full
Domain Users: Change		SBS intranet client Help.
%SystemDrive%\InetPub\WWWRoot\IntranetDomain Admins: Full
Domain Users: Change		SBS intranet.
%SystemDrive%\Winnt.sbs\Help\Sbs.srv\HtmDomain Admins: Full
Domain Users: Read		Online Guide files.
%SystemDrive%\Winnt.sbs\Help\Sbs.srv\MiscDomain Admins: Full
Domain Users: Read		Online Guide files.
%SystemDrive%\SmallBusinessDomain Admins: FullContains Administrator files (wizards, dynamic link libraries, and so on).
%SystemDrive%\SmallBusiness\ClientsDomain Admins: Full
Domain Users: Read		Contains response and Setup folders.
%SystemDrive%\SmallBusiness\Clients\ResponseDomain Admins: Full
Domain Users: Full		Folders for each client computer; contains information files used by OCManager during client Setup.
%SystemDrive%\SmallBuisness\Clients\SetupDomain Admins: Full
Domain Users: Read		Contains I386 and Microsoft Windows 95 folders.
%SystemDrive%\SmallBuisness\Clients\Setup\I386Domain Admins: Full
Domain Users: Read		Setup files for Microsoft Windows NT clients.
%SystemDrive%\SmallBuisness\Clients\Setup\Win95Domain Admins: Full
Domain Users: Read		Setup files for Windows 95/98 clients.
%SystemDrive%\SmallBusiness\FloppyDomain Admins: FullNetworking Setup files copied to disk by the Set Up Computer Wizard.
%SystemDrive%\SmallBusiness\HTMLDomain Admins: FullConsole.
%SystemDrive%\SmallBusiness\TemplateDomain Admins: FullInformation files copied to response directories by the Set Up Computer Wizard.
%SystemDrive%\SmallBusiness\HTML\LogsDomain Admins: Full
Domain Users: Read



The default permissions for the %SystemDrive%\Winnt.sbs and %SystemDrive%\Winnt.sbs\System32 folders are not listed in the Microsoft BackOffice Small Business Server 4.5 Resource Kit.

The %SystemDrive%\Winnt.sbs folder should only show Everyone with Full Control. The %SystemDrive%\Winnt.sbs\System32 folder should have the following permissions set:
  • Administrators: Full
  • Creator/Owner: Full
  • Everyone: Change
  • Server Operators: Change
  • System: Full
Modification Type:MajorLast Reviewed:10/15/1999
Keywords:kbenv kbinfo KB241966
©2002 Microsoft Corporation. All rights reserved.