Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a situation where a bunch of users are running our software on a Terminal Services machine on Windows 2003 Server. I've removed most permissions from the User group, but made sure they all have the appropriate permissions for their own application folders, as well as for their Documents and Settings folder.

For some reason, even though everything seems to be set up properly, users can't create or delete files from their My Documents, Temp or other D&S folders.

Whatever could be going on? I thought this was going to be straightforward, but clearly it's not! :-)

Thanks for any help!

share|improve this question
My guess is that the rather opaque phrase "I've removed most permissions from the User group" probably contains your answer. What do you mean, specifically? I suspect you're trying to say that you've been out monkeying around with NTFS (and possibly registry) ACL entries relating to the BUILTIN\Users group. The default permissions for BUILTIN\Users on a W2K3 Terminal Server computer are sufficient to prevent unprivileged users from damaging the machine. You don't need to try and outthink Microsoft re: the permissions granted to BUILTIN\Users by default. – Evan Anderson Mar 22 '10 at 18:37

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.