You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
108 lines
4.5 KiB
108 lines
4.5 KiB
; (c) Microsoft Corporation 1997-2002
|
|
;
|
|
; Security Configuration Template for Security Configuration Editor
|
|
;
|
|
; Template Name: ProfSec.INF
|
|
; Template Version: 05.20.DW.0000
|
|
;
|
|
; Default Security for Profiles Directory
|
|
|
|
[version]
|
|
signature="$CHICAGO$"
|
|
revision=1
|
|
DriverVer=10/01/2002,5.2.3688.0
|
|
|
|
[File Security]
|
|
;
|
|
; Default User Profile, overwrite existing DACLs on all subfolders/files
|
|
;
|
|
"%DefaultUserProfile%", 2, "D:(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)(A;OICIID;GXGR;;;BU)(A;OICIID;GXGR;;;PU)(A;OICIID;GXGR;;;WD)"
|
|
|
|
;
|
|
; All Users Profile, set on the folder only
|
|
;
|
|
"%AllUsersProfile%", 4, %Default_AllUsers%
|
|
|
|
;
|
|
; Desktop, Favorites, Start Menu and Templates, inherite from all user's profile and overwrite existing DACL
|
|
;
|
|
"%Common_Desktop%", 2, %Default_Inherited%
|
|
"%Common_Favorites%", 2, %Default_Inherited%
|
|
"%Common_StartMenu%", 2, %Default_Inherited%
|
|
"%Common_Templates%", 2, %Default_Inherited%
|
|
|
|
;
|
|
; ntuser.pol, inherited from all user's folder
|
|
;
|
|
"%AllUsersProfile%\ntuser.pol", 2, %Default_Inherited%
|
|
|
|
;
|
|
; Documents, writable to user, OVERWRITE existing DACLs on all subfolders/files
|
|
; Note: Since FAT doesn't have owner information, the CO(F) ace doens't make effect after the conversion,
|
|
; The owner of the documents has to ask the admin to manually reset the document ownership.
|
|
;
|
|
"%Common_Docs%", 2, "D:P(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)(A;OICIIO;GA;;;CO)(A;OICI;0x1301bf;;;PU)(A;OICI;0x1200a9;;;BU)(A;CI;DCLCRPCR;;;BU)"
|
|
"%Common_Docs%\Desktop.ini", 2, %Default_AllUsers%
|
|
;
|
|
; App Data, writable to user, set on the folder itself, all the subfolders/files that not specify in this file will remain
|
|
; the unchanged, i.e. Everyone(F) after FAT->NTFS conversion.
|
|
;
|
|
"%Common_AppData%", 4, "D:P(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)(A;OICIIO;GA;;;CO)(A;OICI;0x1301bf;;;PU)(A;OICI;0x1200a9;;;BU)(A;CI;DCLCRPCR;;;BU)"
|
|
"%Common_AppData%\Desktop.ini", 2, %Default_AllUsers%
|
|
|
|
;
|
|
; App Data\Microsoft, same as all user's folder
|
|
;
|
|
"%Common_AppData%\Microsoft", 4, %Default_AllUsers%
|
|
|
|
|
|
"%Common_AppData%\Microsoft\Network", 4, %Default_Inherited%
|
|
"%Common_AppData%\Microsoft\Network\Downloader", 2, "D:P(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)"
|
|
"%Common_AppData%\Microsoft\Network\Connections", 2, %Default_Inherited%
|
|
"%Common_AppData%\Microsoft\Network\Connections\Pbk\cm", 2, "D:P(A;OICI;0x1301ff;;;WD)"
|
|
"%Common_AppData%\Microsoft\Network\Connections\Pbk\rasphone.pbk", 2, "D:P(A;;0x1301ff;;;WD)"
|
|
"%Common_AppData%\Microsoft\Network\Connections\Pbk\_cmphone.pbk", 2, "D:P(A;;0x1301ff;;;WD)"
|
|
|
|
"%Common_AppData%\Microsoft\User Account Pictures", 2, %Default_Inherited%
|
|
|
|
"%Common_AppData%\Microsoft\Crypto", 4, %Default_Inherited%
|
|
"%Common_AppData%\Microsoft\Crypto\RSA", 4, %Default_Inherited%
|
|
"%Common_AppData%\Microsoft\Crypto\RSA\MachineKeys", 4, "D:P(A;;0x12019f;;;WD)(A;;FA;;;BA)"
|
|
"%Common_AppData%\Microsoft\Crypto\DSS", 4, %Default_Inherited%
|
|
"%Common_AppData%\Microsoft\Crypto\DSS\MachineKeys", 4, "D:P(A;;0x12019f;;;WD)(A;;FA;;;BA)"
|
|
|
|
"%Common_AppData%\Microsoft\Windows NT", 4, %Default_Inherited%
|
|
"%Common_AppData%\Microsoft\Windows NT\MSFax", 4, %Default_Inherited%
|
|
"%Common_AppData%\Microsoft\Windows NT\MSFax\Inbox", 2, "D:PAI(A;OICI;FA;;;BA)(A;OICI;FA;;;NS)"
|
|
"%Common_AppData%\Microsoft\Windows NT\MSFax\SentItems", 2, "D:PAI(A;OICI;FA;;;BA)(A;OICI;FA;;;NS)"
|
|
"%Common_AppData%\Microsoft\Windows NT\MSFax\Queue", 2, "D:PAI(A;OICI;FA;;;BA)(A;OICI;FA;;;NS)"
|
|
"%Common_AppData%\Microsoft\Windows NT\MSFax\ActivityLog", 2, "D:PAI(A;OICI;FA;;;BA)(A;OICI;FA;;;NS)"
|
|
"%Common_AppData%\Microsoft\Windows NT\MSFax\Common Coverpages", 2, "D:PAI(A;OICI;FA;;;BA)(A;OICI;0x1200a9;;;WD)"
|
|
|
|
"%Common_AppData%\Microsoft\Windows NT\NtBackup", 2, "D:P(A;OICI;FA;;;BA)(A;OICI;FA;;;BO)"
|
|
|
|
;
|
|
; !!!Note: This is based on the info given by the team, not compared to clean install yet, but this is everyone full control!
|
|
;
|
|
"%Common_AppData%\Microsoft\Firewall Client", 2, "D:P(A;OICI;FA;;;WD)"
|
|
|
|
;
|
|
; !!!Note: This is based on the info given by the team, but the clean install has different ACL on this folder!
|
|
;
|
|
"%Common_AppData%\Microsoft\HTML Help", 2, %Default_Inherited%
|
|
|
|
|
|
|
|
|
|
[Strings]
|
|
|
|
;
|
|
; Default ACL for All Users and AppData\Microsoft, doesn't need to be localized
|
|
|
|
Default_AllUsers = "D:P(A;OICI;FA;;;SY)(A;OICI;FA;;;BA)(A;OICI;GXGR;;;BU)(A;OICI;0x1301ff;;;PU)(A;OICI;GXGR;;;WD)"
|
|
|
|
;
|
|
; Default inherited ACL from about Default_AllUsers, all aces are same, only added an "ID" flag, doesn't need to be localized
|
|
;
|
|
|
|
Default_Inherited = "D:(A;OICIID;GA;;;SY)(A;OICIID;GA;;;BA)(A;OICIID;0x1301ff;;;PU)(A;OICIID;GXGR;;;BU)(A;OICIID;GXGR;;;WD)"
|