Part III
Securing the Core Operating System
Chapter 7
Securing Permissions
In Microsoft Windows 2000 and Windows XP, a security principal s level of access to files and folders is determined by NTFS file system and share permissions. These permissions are discretionary: anyone with ownership of a file or folder, Change Permissions, or Full Control permissions can assign access control at his discretion. When freshly installed, Window 2000 and Windows XP assign default permission structures to operating system files and folders, but you might need to alter these permissions to meet your security requirements.