If the answer file of your unattended Windows 2000 install contains OemPreinstall=Yes, permissions on the Documents and Settings folder are set to Full Control for the Everyone group.
NOTE: The only sub-folders effected are the Default and All Users folders.
Use CACLS to set the permissions to:
<b>Everyone</b> = <b>Read</b>
<b>Power Users</b> = <b>Read/modify</b>
<b>System</b> = <b>Full Control</b>
<b>Users</b> = <b>Read</b>