Documents and Settings Folder Permissions Are Set Improperly When OemPreinstall=Yes Exists in the Answer File (256569)

The information in this article applies to:

Microsoft Windows 2000 Server
Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Professional

This article was previously published under Q256569

SYMPTOMS

When you perform an unattended installation of Windows 2000 and the OemPreinstall=Yes parameter is in the answer file, the NTFS permissions are not set properly on the Documents and Settings folder. When Setup is finished, the folders (Documents and Settings and All Users and Default Users) have the permissions set to Everyone: FC (Full Control).

NOTE: The Users Profile folder (Administrator, Username1, and so on) have the correct NTFS permissions applied to them when they are created at the first logon attempt. Only the Default and All Users folders are affected.

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

To work around this behavior, use Cacls to set the permissions on the Documents and Settings folder after Setup is finished. The default permissions are as follows:

Administrator = Full Control
Everyone = Read
Power Users = Read/modify
System = Full Control
Users = Read

STATUS

Microsoft has confirmed that this is a problem in Microsoft Windows 2000. This problem was first corrected in Windows 2000 Service Pack 1.

Modification Type:	Major	Last Reviewed:	11/20/2003
Keywords:	kbbug kbfix kbsetup kbWin2000SP1Fix KB256569