up vote 0 down vote favorite
share [g+] share [fb]

anybody know if on %WindowsPath%\security the "Authenticated Users" and "Server Operators" must have "Traverse Folder" permissions on a Domain Controller (Windows 2003).

An external audit over my company observed that I not sure if they are right.

BR

link|improve this question
44% accept rate
feedback

1 Answer

up vote 0 down vote accepted

That is an unusual recommendation. The only time I have seen that permission removed is to prevent executing files, similar to noexec.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.