Windows 2008 NTFS Security RESET

Posted on 2011-10-04
Last Modified: 2012-05-12
Hi Guys,

Need some advice, last week i setup a Windows 2008r2 Remote desktop server (Terminal Services), the server is a member server and all OS is installed on the C drive, the d drive is for the user profiles etc.

One of the on-site guys today changed some ntfs permissions in the C:\windows folders and then realized the many problems started to happen.  He's managed to undo what he thinks what was changed but i'm not confident all the permissions have been put back as i never done it.

Luckily the server has not gone live just yet, aiming for the 14th so i have a little time.

Does anyone know if there is any sort of "reset tool" that will put the windows directory and its sub directories back to default permission.

The server has no current issues but i really don't want any surprises once its gone live.


Question by:roger_patel
    LVL 7

    Expert Comment

    by:Matthew England
    Not really, but you can use the Microsoft Security Configuration & Analysis tool paired with the defltsv.inf template in order to see any changes from a typical Server 2008 install. It includes much more than just the file system settings you are concerned with so I would advise only to use the "Analyze" option, and then correct the settings manually. You can of course make a copy then edit the INF file to remove any items you're not concerned with if you do want to "Configure" your server with it.

    1. Open a new MMC, and add the Security Configuration and Analysis snap-in
    2. Follow the instructions to create a new database, and when prompted select the defltsv.inf template (C:\Windows\inf\defltsv.inf)
    3. Once the template is imported, right-click, and choose Analyze Computer Nowoption from the context menu.

    Once the system scan is complete, you'll be able to expand and browse through the tree of objects checked, and you can make the decision  at that point as to how you want to correct the issue, either manually or by using the Configure Computer Now option.

    Accepted Solution

    Thanks but we took the call and rebuilt the server.

    Author Closing Comment

    rebuilt server

    Author Comment

    rebuilt server

    Featured Post

    Promote certifications in your email signature

    Has your company recently won an award or achieved a certification? They'll no doubt want to show it off. Email signature images used to promote certifications & awards can instantly establish credibility with a recipient and provide you with numerous benefits.

    Join & Write a Comment

    Here's a useful script that will automatically delete ALL user profiles that are on a Windows Server 2008/R2 computer.   WARNING! This is a dangerous operation, designed for use by an administrator who needs to do a complete purge; for instance a…
    If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
    This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
    This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now