How to restore the default NTFS permissions for Windows 2000 (266118)


The information in this article applies to:

  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Professional
This article was previously published under Q266118

SUMMARY

This article describes how to restore the default NTFS file system permissions for Microsoft Windows 2000. Windows 2000 includes Security Configuration templates that contain the default settings for NTFS permissions, for registry permissions, for default user rights, and for others.

MORE INFORMATION

You can use the Security Configuration templates in conjunction with the Security Configuration and Analysis snap-in from Microsoft Management Console (MMC) to restore the default security settings in Windows 2000. To do so, follow these steps:
  1. Click Start, and then click Run.
  2. In the Open box, type mmc.exe, and then click OK.
  3. On the Console menu, click Add/Remove Snap-in.
  4. Click Add, and then double-click Security Configuration and Analysis.
  5. Click Close, and then click OK.
  6. Right-click Security Configuration and Analysis, and then click Open database.
  7. Create the following new database file:

    %SystemRoot%\Security\Database\Aclrestore.sdb

    You will be prompted to import a security template.
  8. In the Look in list, click My Computer, and then double-click Local Disk (C:).
  9. Double-click WINNT, and then double-click Inf.

    Note By default, the Inf folder is hidden. To view the hidden Inf folder, follow these steps:
    1. On the desktop of your computer, double-click My Computer.
    2. On the Tools menu, click Folder Options.
    3. Click the View tab, click Show hidden files and folders, and then click OK.
  10. Select one of the following templates (.inf files), as appropriate for your configuration, and then click Open:
    • Defltwk.inf: Windows 2000 Professional
    • Defltsv.inf: Windows 2000 Server/Advanced Server non-domain controller
    • Defltdc.inf: Windows 2000 Server/Advanced Server domain controller
  11. After you successfully import the template, follow the instructions in the right pane to configure your computer with the security settings that are contained in the template.

REFERENCES

For additional information about Default NTFS Permissions, click the following article numbers to view the articles in the Microsoft Knowledge Base:

244600 Default NTFS permissions in Windows 2000

148437 Default NTFS permissions in Windows NT

Modification Type:MajorLast Reviewed:1/31/2005
Keywords:kbhowto KB266118 kbAudITPro
©2004 Microsoft Corporation. All rights reserved.