Hi everyone,
I am trying to remove the default ACL of Authenticated Users/Modify from C:\ from my Windows 2003 x64 servers because it allows users to create junk all over the place. However whenever I try I get a Security message of 'Unable to save permission changes on OS (C:), Access is denied.' Same for trying it at the command prompt.
C:\>icacls C:\ /remove:g *S-1-5-11
C:\: Access is denied.
Successfully processed 0 files; Failed processing 1 files
How can I get rid of Authenticated users from C:\? And why is the default permission of a server OS giving everyone modify access to the root of C:\? Any help is appreciated.
thanks
Pete