Tag Info

New answers tagged


Short answer: don't touch these. Long answer: Setting an ACL - ANY ACL in ANY file system, is a security decision that involves trade-off. In order to decide what the "correct" ACL to use is, you need to consider what the use of the protected objects will be. This means you need to consider either a typical usage (for "default" ACLs) or a specific case ...


No such thing I don't think that there is an official, Microsoft-supported way of doing this. Here's an MS blog post that urges users to only use official hardening methods (namely Security Compliance Manager and Security Configuration Wizard) (And AFAIK even those two don't touch the NTFS ACLs at all.) Microsoft TechNet, Premier Field Engineering (PFE) ...

Top 50 recent answers are included