Users do not have broad write access to the system. Such users have read access to most parts of the system and write access only under their own profile folders. Such users can only access domain controllers over the network. Local logon to domain controllers is denied. Server Operators, Account Operators, and other built-in groups have the same access as in Windows NT 4.0 and earlier.
Administrators have all the access they have always had.
Upgrades Computers upgraded from Windows NT 4.0 do not use the new default security settings described above. Instead, all existing security settings are maintained. All rights reserved. Terms of Use. No Did not apply Please provide additional comments about this information.