Help! All users get admin right

[rtcwong]

Dear all,
I am using NT4 terminal server, MF 1.8.
I discover that all citrix client users have admin right
on my citrix server.When they use any application on citrix server though client. When they open file by file-> open
then a explorer appear for select file. Then if he select any folder and press DELETE, then the whole system....
is it the setting problem? please help.

thanks.

 

[DaveNamou]

Well, by default the EVERYONE group has Full Control to almost all of the folders except for
WTSRV (and everything under it)

They actually have Change Control (which allows them to delete) under the System Drive and then they have Full Control for all other Drives. So if C: is your system drive and then you have D: and E:, the EVERYONE group would have CHANGE on C: and Full Control on D: and E:

Oh yeah, I forgot to mention. If your not using NTFS, forget about any control... Everyone can delete anything once they logon. Including files and folder in WTSRV. Dave Namou, MCSE CCEA

 

[Guest_imported]

Dear Namou,

I am using NT terminal server with NTFS. Could I control user's right? (to avoid user could delete/create/change the file from file exploer etc)

Thanks.

 

[woonbronmaasoevers]

Yes you can.. right mouseclick on a folder > properties > select the tab "security" > button: "Permissions" > here you see the rights. I think "Everyone" has full controll.

gr,
Danny

 

[Guest_imported]

Dear Danny,

I have check the security already, but only admin is full control. You may try use word etc though citrix and then choose file->open->and a file browser would open. Then you could delete/create everthihg you want here. If you create a file and then check the owner, you would see it is created by admin. This mean everthing could have full control if you could open a file browser. (actually, you could shadow the whole server by right click mouse and select shadow...such a big security problem.
p.s. already tried for citrix and NT WTS.

 

[woonbronmaasoevers]

hmm strange.. is there a way to get me into your server to see for myself? we could look together...

mail me:
dschuller@maasoevers.nl