deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-14 22:37:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'refs/remotes/origin/master' into jd-sandbox

Browse Source
This commit is contained in:
jdeckerMS 2016-08-30 16:41:01 -07:00
commit b7a1519c8c
1 changed files with 21 additions and 128 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

149
mdop/uev-v2/security-considerations-for-ue-v-2x-both-uevv2.md
View File

@ -33,143 +33,36 @@ Because settings packages might contain personal information, you should take ca
1. Set the following share-level SMB permissions for the setting storage location folder. 1. Set the following share-level SMB permissions for the setting storage location folder.
<table> | User account | Recommended permissions |
<colgroup> | - | - |
<col width="50%" /> | Everyone | No permissions |
<col width="50%" /> |Security group of UE-V | Full control |
</colgroup>
<thead>
<tr class="header">
<th align="left">User account</th>
<th align="left">Recommended permissions</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Everyone</p></td>
<td align="left"><p>No permissions</p></td>
</tr>
<tr class="even">
<td align="left"><p>Security group of UE-V</p></td>
<td align="left"><p>Full control</p></td>
</tr>
</tbody>
</table>
 
2. Set the following NTFS file system permissions for the settings storage location folder. 2. Set the following NTFS file system permissions for the settings storage location folder.
<table> | User account | Recommended permissions | Folder |
<colgroup> | - | - | - |
<col width="33%" /> | Creator/Owner | No permissions | No permissions |
<col width="33%" /> | Domain Admins | Full control | This folder, subfolders, and files |
<col width="33%" /> | Security group of UE-V users | List folder/read data, create folders/append data | This folder only |
</colgroup> | Everyone | Remove all permissions | No permissions |
<thead>
<tr class="header">
<th align="left">User account</th>
<th align="left">Recommended permissions</th>
<th align="left">Folder</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Creator/Owner</p></td>
<td align="left"><p>No permissions</p></td>
<td align="left"><p>No permissions</p></td>
</tr>
<tr class="even">
<td align="left"><p>Domain Admins</p></td>
<td align="left"><p>Full control</p></td>
<td align="left"><p>This folder, subfolders, and files</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Security group of UE-V users</p></td>
<td align="left"><p>List folder/read data, create folders/append data</p></td>
<td align="left"><p>This folder only</p></td>
</tr>
<tr class="even">
<td align="left"><p>Everyone</p></td>
<td align="left"><p>Remove all permissions</p></td>
<td align="left"><p>No permissions</p></td>
</tr>
</tbody>
</table>
 
3. Set the following share-level SMB permissions for the settings template catalog folder. 3. Set the following share-level SMB permissions for the settings template catalog folder.
<table> | User account | Recommend permissions |
<colgroup> | - | - |
<col width="50%" /> | Everyone | No permissions |
<col width="50%" /> | Domain computers | Read permission Levels |
</colgroup> | Administrators | Read/write permission levels |
<thead>
<tr class="header">
<th align="left">User account</th>
<th align="left">Recommend permissions</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Everyone</p></td>
<td align="left"><p>No permissions</p></td>
</tr>
<tr class="even">
<td align="left"><p>Domain computers</p></td>
<td align="left"><p>Read permission Levels</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Administrators</p></td>
<td align="left"><p>Read/write permission levels</p></td>
</tr>
</tbody>
</table>
   
4. Set the following NTFS permissions for the settings template catalog folder. 4. Set the following NTFS permissions for the settings template catalog folder.
<table> | User account | Recommended permissions | Apply to |
<colgroup> | - | - | - |
<col width="33%" /> | Creator/Owner | Full control | This folder, subfolders, and files |
<col width="33%" /> | Domain Computers | List folder contents and Read permissions | This folder, subfolders, and files|
<col width="33%" /> | Everyone| No permissions| No permissions|
</colgroup> | Administrators| Full Control| This folder, subfolders, and files|
<thead>
<tr class="header">
<th align="left">User account</th>
<th align="left">Recommended permissions</th>
<th align="left">Apply to</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Creator/Owner</p></td>
<td align="left"><p>Full control</p></td>
<td align="left"><p>This folder, subfolders, and files</p></td>
</tr>
<tr class="even">
<td align="left"><p>Domain Computers</p></td>
<td align="left"><p>List folder contents and Read permissions</p></td>
<td align="left"><p>This folder, subfolders, and files</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Everyone</p></td>
<td align="left"><p>No permissions</p></td>
<td align="left"><p>No permissions</p></td>
</tr>
<tr class="even">
<td align="left"><p>Administrators</p></td>
<td align="left"><p>Full Control</p></td>
<td align="left"><p>This folder, subfolders, and files</p></td>
</tr>
</tbody>
</table>
 
### Use Windows Server as of Windows Server 2003 to host redirected file shares ### Use Windows Server as of Windows Server 2003 to host redirected file shares