If the answer file of your unattended Windows 2000 install contains OemPreinstall=Yes, permissions on the Documents and Settings folder are set to Full Control for the Everyone group.

NOTE: The only sub-folders effected are the Default and All Users folders.

Use CACLS to set the permissions to:

        <b>Administrator</b> = <b>Full Control</b>
        <b>Everyone</b> = <b>Read</b>
        <b>Power Users</b> = <b>Read/modify</b>
        <b>System</b> = <b>Full Control</b>
        <b>Users</b> = <b>Read</b>