Ever since I begun working with Windows Server 2008 I have noticed that the SYSVOL folder C:\Windows\SYSVOL\sysvol
is shared and the NTFS permissions for the Authenticated Users
group are almost maxed.
Although I know that this folder has to be shared (and it is shared by default) I have to protect it somehow from the everyday users. Last week I turned off the shared permissions and it interrupted the execution of GPO.. ffs it took me whole day until i realized that after i removed the sharing the GPOs stoped processing on the client workstations :S.
So how to give the minimum permission settings on this folder so that it is protected from everyday users but the execution of the GPOs is not interrupted?