Not the same WIN2003 server security configuration skills

        The specific configuration is as follows:
Windows root directory permissions settings:
C: /WINDOWS /Application Compatibility Scripts without any modifications, including all subdirectories under it
C: /WINDOWS /AppPatch AcWebSvc.dll already There are users group permissions, other files plus users group permissions
C: /WINDOWS /Connection Wizard Cancel users groups permissions
C: /WINDOWS /Debug users group default does not change
C: /WINDOWS /Debug /UserMode does not modify the permissions to write files by default, cancel the permissions of the users group, give special permissions, see the demo
C: /WINDOWS /Debug /WPD does not cancel the Authenticated Users group permissions can be written to the file, create a directory. Br>/:WINDOWS/Driver Cache cancels the permissions of the users group, and gives the users group permissions to all files in the i386 folder
C:/WINDOWS/Help cancels the permissions of the users group
C:/WINDOWS/Help/iisHelp /common cancels permissions for users group
C:/WINDOWS/IIS Temporary Compressed Files does not modify by default
C:/WINDOWS/ime does not need to be modified, package All subdirectories under it
C:/WINDOWS/inf do not need to be modified, including all subdirectories under it
C:/WINDOWS/Installer Delete the permissions of the everyone group, and add the everyone group to the files in the directory. And running permissions
C:/WINDOWS/java Cancel the permissions of the users group, add the permissions of the users group to all files in the subdirectory
C:/WINDOWS/MAGICSET Default unchanged
C:/WINDOWS/Media defaults unchanged
C:/WINDOWS/Microsoft.NET does not need to be modified, including all subdirectories under it
C:/WINDOWS/msagent Cancel the permissions of users group, add users to all files in subdirectories Group permissions
C:/WINDOWS/msapps No need to make any changes, including all subdirectories under it
C:/WINDOWS/mui Cancel users groups permission
C:/WINDOWS/PCHEALTH Default does not change
C:/WINDOWS/PCHEALTH/ERRORREP/QHEADLES Cancel the permissions of the everyone group
C:/WINDOWS/PCHEALTH/ERRORREP/QSIGNOFF Cancel the permissions of the everyone group
C:/WINDOWS/PCHealth/UploadLB Delete the permissions of the everyone group, Other subordinate directories do not need Managed, no user group and everyone group permissions
C:/WINDOWS/PCHealth/HelpCtr Delete the permissions of the everyone group, other subordinate directories do not need to be managed, there is no user group and everyone group permissions (this does not have to search for those files in the demo) , do not need to add the permissions of the users group)
C: /WINDOWS /PIF default does not change
C: /WINDOWS /PolicyBackup default does not change, add the permissions of the users group to all files in the subdirectory