I created a fresh NT 4.0 BDC, took it offline and performed an in place upgrade to 2003. Later I created 2 new 2003 Domain Controllers from scratch to operate in the same Domain. When I now set up ditectory share and file permissions with any user created after I created the new network they are seem to some how become joined with the everyone group. Unless I add this group with the user the user won't have any access at all. In addition the everyone group must be granted the same access that I want the user to have. The users that came along with the BDC from the original network don't have this requirement (normal).