Permissions are a mess

I've noticed that the file system permissions in Windows are a mess.
Various folders on my hard drive (a lot of them under C:\WINDOWS) do
not inherit permissions. Sometimes they have permissions directly
defined on them that are the same as their parent (in that case it
would make more sense to just have them inherit the permissions).

I'd like to try to clean this up, but want to make sure that I don't
screw anything up. I'd like to have the root directory of my C drive
have the following permissions:

Administrators: Allow: Full Control (this folder, subfolders and files)
CREATOR OWNER: Allow: Full Control (subfolders and files)
Power Users: Allow: Modify (this folder, subfolders and files)
SYSTEM: Allow: Full Control (this folder, subfolders and files)
Users: Allow: Read & Execute (this folder, subfolders and files)

And then on the Security tab of the C:\ folder, I want to check the
"Reset permissions on all child objects and enable propagation of
inheritable permissions" box, that way EVERYTHING on my drive will
inherit the permissions mentioned above.

Of course, after I do that, I would need to adjust the permissions for
the folders under C:\Documents and Settings, otherwise users would be
able to read other users' private data.

Does anyone see a problem with this idea?

If it isn't broke don't fix it.


<void.no.spam.com DeleteThis @gmail.com> wrote in message
news:1167251738.336728.191470@79g2000cws.googlegroups.com...
> I've noticed that the file system permissions in Windows are a mess.
> Various folders on my hard drive (a lot of them under C:\WINDOWS) do
> not inherit permissions. Sometimes they have permissions directly
> defined on them that are the same as their parent (in that case it
> would make more sense to just have them inherit the permissions).
>
> I'd like to try to clean this up, but want to make sure that I don't
> screw anything up. I'd like to have the root directory of my C drive
> have the following permissions:
>
> Administrators: Allow: Full Control (this folder, subfolders and files)
> CREATOR OWNER: Allow: Full Control (subfolders and files)
> Power Users: Allow: Modify (this folder, subfolders and files)
> SYSTEM: Allow: Full Control (this folder, subfolders and files)
> Users: Allow: Read & Execute (this folder, subfolders and files)
>
> And then on the Security tab of the C:\ folder, I want to check the
> "Reset permissions on all child objects and enable propagation of
> inheritable permissions" box, that way EVERYTHING on my drive will
> inherit the permissions mentioned above.
>
> Of course, after I do that, I would need to adjust the permissions for
> the folders under C:\Documents and Settings, otherwise users would be
> able to read other users' private data.
>
> Does anyone see a problem with this idea?
>