Shared folders granting access to all users (Windows)

Module: Network Integrity

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

This check reports shared folders that give Full Control, Change Control, and Read Control to the Everyone security group. Only users that are specifically restricted do not have the specified Control. Use the name list to include or exclude shared names of shared folders for this check.

The following table lists the error messages for the check.

Table: Error messages for Shared folders granting access to all users

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESM_SHARED_DIRS_WITH_ALL_ACCESS

Category: Change Notification

  • Windows 2000 (106334)

  • Windows 2003 (206334)

  • Windows 2008 (249334)

  • Windows Vista (229334)

  • Windows XP (201334)

Title: Shared folders giving all users Full Control

Description:The Everyone group has full control of the shared folder. Members of the Everyone group who are not explicity denied access can write, read, delete, or otherwise modify the files in the folder. Remove the Everyone group from the folder's access list.

Severity: yellow-1

Correctable: true

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [Resource: %s]

String ID: ESM_SHARED_DIRS_WITH_CHANGE_ACCESS

Category: Change Notification

  • Windows 2000 (106363)

  • Windows 2003 (206369)

  • Windows 2008 (249369)

  • Windows Vista (229368)

  • Windows XP (201368)

Title: Shared folders giving all users Change Control

Description:The Everyone group has change control of the shared folder. Members of the Everyone group who are not explicity denied access can read and modify the files in the folder. Remove the Everyone group from the folder's access list.

Severity: yellow-1

Correctable: true

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [Resource: %s]

String ID: ESM_SHARED_DIRS_WITH_READ_ACCESS

Category: Change Notification

  • Windows 2000 (106364)

  • Windows 2003 (206370)

  • Windows 2008 (249370)

  • Windows Vista (229369)

  • Windows XP (201369)

Title: Shared folders giving all users Read Control

Description:The Everyone group has read control of the shared folder. Members of the Everyone group who are not explicity denied access can read the files in the folder. Remove the Everyone group from the folder's access list.

Severity: yellow-1

Correctable: true

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [Resource: %s]

String ID: ESM_SHARED_DIRS_WITH_UNKNOWN_ACCESS

Category: Change Notification

  • Windows 2000 (106365)

  • Windows 2003 (206371)

  • Windows 2008 (249371)

  • Windows Vista (229370)

  • Windows XP (201370)

Title: Shared folders giving all users Unknown Control

Description:The Everyone group has unknown control of the shared folder. Remove the Everyone group from the folder's access list.

Severity: red-4

Correctable: true

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [Resource: %s]