Files giving all users Full Control (Windows)

Module: File Attributes

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

This check reports files and folders that give Full Control to the Everyone security group. All users have Full Control of these files and folders unless access is specifically denied. Enter the files and/or folders to be checked in name list.

The following table lists the error messages for the check.

Table: Error messages for Files giving all users Full Control

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESMT_FILES_WITH_ALL_ACCESS

Category: Policy Compliance

  • Windows 2000 (105549)

  • Windows 2003 (205549)

  • Windows 2008 (248549)

  • Windows Vista (228549)

  • Windows XP (200549)

Title: File or folder giving all users Full Control

Description:The file or folder gives the local Everyone group Full Control. If this is correct, remove the file or folder from the check's name list. If it is incorrect, remove the Everyone group from the file or folder access list.

Severity: yellow-1

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: []

String ID: ESMT_FILE_LOCKED

Category: Policy Compliance

  • Windows 2000 (105550)

  • Windows 2003 (205550)

  • Windows 2008 (248550)

  • Windows Vista (228550)

  • Windows XP (200550)

Title: Locked file

Description:File permissions cannot be reported because the file is being used by another process.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: []

String ID: ESMT_FILE_NOT_FOUND

Category: Policy Compliance

  • Windows 2000 (105551)

  • Windows 2003 (205551)

  • Windows 2008 (248551)

  • Windows Vista (228551)

  • Windows XP (200551)

Title: File or folder not found

Description:The file or folder was not found.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: []