I wonder whether anyone has a theory on this interesting issue. We have many primary sites in my environment (one per building geographically disbursed) and on each primary site server, we've shared out the SMSCLIENT folder (Share perms: Authenticated Users/Read, NTFS perms: (default)+Domain\Authenticated Users, Read). Periodically (and fairly regularly), we get a ticket from our IT support staff saying that they can't install the SMS client... and when we logon to the server, we notice that the NTFS permissions for (domain)\Authenticated Users is gone... and realistically speaking... no one from our group would have removed these permissions manually... Anyone have a theory as to why this built-in group would get removed without human intervention? Perhaps something about it being a domain group and not the local group? Perhaps an update that comes down from WSUS? Any theories are welcome! Chris

A site reset would reset those permissions: http://technet.microsoft.com/en-us/library/bb633159.aspxTorsten Meringer | http://www.mssccmfaq.de

This is known behavior (to my knowledge). Any time you restart the server or more specifically the Site Component thread (I think its that one) permissions get reset on the ConfigMgr folder structure. Thus, it's a bad idea to use the default folder structure for this. The simply solution is to copy the client files to a new location, set your permissions and "move" the share name.Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys

A site reset does not reset access permissions to non-Configuration Manager 2007 objects. So if you feel inconvenience, you can put the client installation file to another folder that is created by yourself and reconfigure the distribution settings.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.