We rolled out Windows Server 2008 recently, and the new NTFS permissions have me stumped a little bit.
I was very familiar with Windows Server 2003 permissions. We have My Documents redirection to a server share. In WinServ 2003, we set each users folder NTFS security permission to allow Administrators Full Control, and John Doe Full Control. John Doe being the user who owns that My Docs folder.
I tried going playing around with the WinServ 2008 box, and it seems by default the user's folder has Everyone, SYSTEM, Domain\Administrators, (My Domain Admin Acct) -- All as FULL CONTROL. Also, there is Domain\Users with Read permissions.
I tried removing everything from the ACL to kind of have the same NTFS security permissions as on the 2003 box, so I removed everything except Domain\Administrators and Domain\John Doe. I gave both of them Full Control.
I'm just wondering what changed, and how should the new NTFS permissions be set for folder shares. Things definitely changed, especially with the annoying UAC asking me to give permission for everything I do.