If the answer file of your unattended Windows 2000 install contains OemPreinstall=Yes, permissions on the Documents and Settings folder are set to Full Control for the Everyone group.

NOTE: The only sub-folders effected are the Default and All Users folders.

Use CACLS to set the permissions to:

        Administrator = Full Control                                      Everyone = Read                                      Power Users = Read/modify                                      System = Full Control                                      Users = Read