The latest security assessment with my organization requires that I lock down the C drive from the everyone group. It seems in the past this was flirting with danger. Is it possible to remove all traces of the everyone group from the NTFS files and folders on the C drive without causing serious harm. I need to perform this on both 2000 and 2003 servers.LMC

Use XCACLS.EXE (most prolly you need the /R switch).http://support.microsoft.com/kb/318754 Or you can use Group Policy to set File System permissions (be wary about overwriting existing permissions):1. Open the policy you wish to use in the Group Policy Editor.2. Navigate to Computer Configuration / Windows Settings / Security Settings / File System.3. Right-click File System and press Add File.4. Browse to the file or folder whose permissions you wish to configure (C:\ root, in your case), select it, and press OK.5. In the Database Security for <File or Folder> dialog, set the permissions and press OK.6. In the Add Object dialog, make your selection and press OK.Regards,Salvador Manaois III MCSE MCSA CEH MCITP | Enterprise/Server Admin Bytes & Badz : http://badzmanaois.blogspot.com