I am in the process of creating the build image of Windows 7 Enterprise 64 bit machine. If I check the properties of C drive, go to Security tab and click on Advanced button, I see Users group permission is only Read and execute however Authenticated Users have Special and Create folders / append data permisions on C drive object. Due to this non admin users also can create folders and save files in the C drive which I don't want. If I remove the permissions for Authenticated users group, even the local administrator is not able to save the files in C drive or create a folder there. Please suggest a permission scheme which can restrict normal users from saving the data and created folders in C drive without screwing the Windows behaviour.

Hi MSeth, Authenticated users group is not a real group. Please see here: http://superuser.com/questions/96948/what-is-authenticated-users-group-in-windows-7 (Note: Since the site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.) However, if you want to remove that group, you can use GPO to remove the Authenticated users group. Regards, MiyaThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi MSeth, Authenticated users group is not a real group. Please see here: http://superuser.com/questions/96948/what-is-authenticated-users-group-in-windows-7 (Note: Since the site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.) However, if you want to remove that group, you can use GPO to remove the Authenticated users group. Regards, MiyaThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.