[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


Windows 2008 NTFS Security RESET

Posted on 2011-10-04
Medium Priority
Last Modified: 2012-05-12
Hi Guys,

Need some advice, last week i setup a Windows 2008r2 Remote desktop server (Terminal Services), the server is a member server and all OS is installed on the C drive, the d drive is for the user profiles etc.

One of the on-site guys today changed some ntfs permissions in the C:\windows folders and then realized the many problems started to happen.  He's managed to undo what he thinks what was changed but i'm not confident all the permissions have been put back as i never done it.

Luckily the server has not gone live just yet, aiming for the 14th so i have a little time.

Does anyone know if there is any sort of "reset tool" that will put the windows directory and its sub directories back to default permission.

The server has no current issues but i really don't want any surprises once its gone live.


Question by:roger_patel
  • 3

Expert Comment

by:Matthew England
ID: 36913491
Not really, but you can use the Microsoft Security Configuration & Analysis tool paired with the defltsv.inf template in order to see any changes from a typical Server 2008 install. It includes much more than just the file system settings you are concerned with so I would advise only to use the "Analyze" option, and then correct the settings manually. You can of course make a copy then edit the INF file to remove any items you're not concerned with if you do want to "Configure" your server with it.

1. Open a new MMC, and add the Security Configuration and Analysis snap-in
2. Follow the instructions to create a new database, and when prompted select the defltsv.inf template (C:\Windows\inf\defltsv.inf)
3. Once the template is imported, right-click, and choose Analyze Computer Nowoption from the context menu.

Once the system scan is complete, you'll be able to expand and browse through the tree of objects checked, and you can make the decision  at that point as to how you want to correct the issue, either manually or by using the Configure Computer Now option.

Accepted Solution

roger_patel earned 0 total points
ID: 36925482
Thanks but we took the call and rebuilt the server.

Author Closing Comment

ID: 36947381
rebuilt server

Author Comment

ID: 36925486
rebuilt server

Featured Post

[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question