Remove users Create folders / append data permissions on C:\

hi,

question moved from http://social.technet.microsoft.com/forums/en-us/winserverts/thread/f51eb756-4f68-4fb4-8a09-b3a5441d0164/#e3bcffdc-6e68-4d46-ab57-04c3e1b57887.

run several 2008r2 sp1 remote desktop servers, occurs on non-rds 2008r2 servers. of them installed official media (so no sysprep images). out of box on our 2008r2 servers, rds or not, users have 'create folders / append data' special permissions on %systemdrive%, root of c:. believe there compatiblity reasons our users found out other uses these permissions. want rid of them can't:

- settings permissions using normal explorer gui gives access denied

- icacls c:\ /remove "users" elevated prompt (although uac disabled) gives access denied

- psexec -s icacls c:\ /remove "users" gives access denied (so running system)

- modifying permissions through gpo, either local or through domain doesn't work, permissions aren't applied (probably access denied)

- taking ownership of c:\ gives access denied; either commandline or gui

- uac disabled

- setting deny users on root gives access denied

i've searched both technet , google , found of above solutions none seem work me. how prevent users dump stuff @ c:\?

i'm such @ss. seems weren't 'clean' after installed mcafee right away of habit , it's been mcafee enterprise 8.8 time preventing change of permissions...

thanks acomb-mouse help.

Windows Server  >  File Services and Storage