For example, if you try to use the Windows Server 2003 Active Directory Users and Computers utility to create a home folder on a Microsoft Windows 2000 domain controller, you may see that the default permissions applied to the new home folder is set so that the Everyone group has Full Control user permission. This behavior is by design because the parent folder is typically set with the Everyone group assigned Full Control.
The Windows 2000 Active Directory Users and Computers utility does not have the capability for a new home folder to inherit the permissions of its parent. Therefore, the Windows 2000 Active Directory Users and Computers utility automatically defines the permissions on a new home folder for you by assigning the administrator and the owner of the home folder Full Control permission. This default permission behavior that is used by the Windows 2000 Active Directory Users and Computers utility for a new home folder cannot be configured (changed).
You can also turn off the ability for the parent folder to propagate its permissions to child folders (turning off inheritance). To do this, follow these steps on the server that is hosting the home folders:
- In Windows Explorer, right-click the parent folder, and then click Properties.
- On the Security tab, click Advanced.
- Click to clear the Allow inheritable permissions from the parent to propagate to this object and all child objects check box.
- Click OK.
Article ID: 817009 - Last Review: Mar 29, 2017 - Revision: 4