Default Permissions for Installation of Small Business Server 4.5 (241966)

MORE INFORMATION

The information in this article is taken from pages 474 and 475 of the Microsoft BackOffice Small Business Server 4.5 Resource Kit.

Default Permissions Applied to Recipients

Permission Recipient	Permission Level
Administrator	Full
Creator/Owner	Full
Server Operators	Change
System	Full

NOTE: For the SBS console and wizards to function correctly, you should not change the permissions for Administrator, Creator/Owner, Server Operators, and System.

Default Permissions Applied to Folders

Folder name	Access control lists (ACLs)	Contents
Company Shared Folder	Domain Admins: Full Domain Users: Full	For use by end users.
User Shared Folders	Domain Admins: Full Domain Users: Read	Contains the shared folders for each user.
FaxStore	Domain Admins: Full Domain Users: Change	Contains incoming faxes. End users need to read and delete files.
System Drive	Domain Admins: Full Domain Users: Read
%SystemDrive%\InetPub\WWWRoot\Intranet\SBSClientHelp	Domain Admins: Full Domain Users: Change	SBS intranet client Help.
%SystemDrive%\InetPub\WWWRoot\Intranet	Domain Admins: Full Domain Users: Change	SBS intranet.
%SystemDrive%\Winnt.sbs\Help\Sbs.srv\Htm	Domain Admins: Full Domain Users: Read	Online Guide files.
%SystemDrive%\Winnt.sbs\Help\Sbs.srv\Misc	Domain Admins: Full Domain Users: Read	Online Guide files.
%SystemDrive%\SmallBusiness	Domain Admins: Full	Contains Administrator files (wizards, dynamic link libraries, and so on).
%SystemDrive%\SmallBusiness\Clients	Domain Admins: Full Domain Users: Read	Contains response and Setup folders.
%SystemDrive%\SmallBusiness\Clients\Response	Domain Admins: Full Domain Users: Full	Folders for each client computer; contains information files used by OCManager during client Setup.
%SystemDrive%\SmallBuisness\Clients\Setup	Domain Admins: Full Domain Users: Read	Contains I386 and Microsoft Windows 95 folders.
%SystemDrive%\SmallBuisness\Clients\Setup\I386	Domain Admins: Full Domain Users: Read	Setup files for Microsoft Windows NT clients.
%SystemDrive%\SmallBuisness\Clients\Setup\Win95	Domain Admins: Full Domain Users: Read	Setup files for Windows 95/98 clients.
%SystemDrive%\SmallBusiness\Floppy	Domain Admins: Full	Networking Setup files copied to disk by the Set Up Computer Wizard.
%SystemDrive%\SmallBusiness\HTML	Domain Admins: Full	Console.
%SystemDrive%\SmallBusiness\Template	Domain Admins: Full	Information files copied to response directories by the Set Up Computer Wizard.
%SystemDrive%\SmallBusiness\HTML\Logs	Domain Admins: Full Domain Users: Read

The default permissions for the %SystemDrive%\Winnt.sbs and %SystemDrive%\Winnt.sbs\System32 folders are not listed in the Microsoft BackOffice Small Business Server 4.5 Resource Kit.

The %SystemDrive%\Winnt.sbs folder should only show Everyone with Full Control. The %SystemDrive%\Winnt.sbs\System32 folder should have the following permissions set:

• Administrators: Full
• Creator/Owner: Full
• Everyone: Change
• Server Operators: Change
• System: Full