Documents and Settings Folder Permissions Are Set Improperly When OemPreinstall=Yes Exists in the Answer File

When you perform an unattended installation of Windows 2000 and the OemPreinstall=Yes parameter is in the answer file, the NTFS permissions are not set properly on the Documents and Settings folder. When Setup is finished, the folders (Documents and Settings and All Users and Default Users) have the permissions set to Everyone: FC (Full Control).

NOTE: The Users Profile folder (Administrator, Username1, and so on) have the correct NTFS permissions applied to them when they are created at the first logon attempt. Only the Default and All Users folders are affected.

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base: To work around this behavior, use Cacls to set the permissions on the Documents and Settings folder after Setup is finished. The default permissions are as follows:

Microsoft has confirmed that this is a problem in Microsoft Windows 2000. This problem was first corrected in Windows 2000 Service Pack 1.