Hi there. Last year I created a WIM image of Windows 7. We deployed this to more than 500 clients. After the migration I found out that during the image creation some special permissions were created on C:\ root which allows users to create folders and files. I would like to remove these special permissions by using a script. I already tried to use the Xcacls.vbs script but while testing all permissions are removed. C:\Users\Ivan>cacls c:\ c:\ NT AUTHORITY\SYSTEM:(OI)(CI)F BUILTIN\Administrators:(OI)(CI)F BUILTIN\Users:(OI)(CI)R BUILTIN\Users:(CI)(special access:) FILE_APPEND_DATA BUILTIN\Users:(CI)(special access:) FILE_WRITE_DATA So FILE_APPEND_DATA and FILE_WRITE_DATA should be removed. Any suggestion is welcome point me into the right direction. Best regards, Ivan Versluis Networknet.nl Blog

Permissions like that are not intended to be programatically manipulated for security reasons. I have some code to remove permissions but its designed to permanently remove them. My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT Remote Assistance is available for a fee. I am best with C++ and I am learning C# using Visual Studio 2010 Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

Hallo Vegan, Thanks for replying. Is there a solution to this or not? I am not sure with your code which is designed to remove them permanetly. Please clarify. Thanks in advance.Best regards, Ivan Versluis Networknet.nl Blog

http://www.windows-it.tk/phpBB3/viewtopic.php?f=17&t=16 This will make permissions permanently reset. My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT Remote Assistance is available for a fee. I am best with C++ and I am learning C# using Visual Studio 2010 Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews

Hi, This forum focuse on Windows 7. So I recommend to post the thread at http://social.technet.microsoft.com/Forums/en/ITCG/threads for assistance. Thanks for understanding.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.