Full Control Permissions Granted to All Users in Profile Management

Full Control Permissions Granted to All Users in Profile Management

book

Article ID: CTX218778

calendar_today

Updated On:

Description

The Full Control permission has been granted to each user. 
For example, when a new user is created in Active Directory and logs on for the first time, a folder is created for that user in the user store. However, all users have permission to access that folder and perform operations on it. 

Resolution

You must create secure user stores by following the steps in Create the user store. There are minimum recommendations that ensure a high level of security for basic operation. 

Note: 
If a UNC path is used for log files, set NTFS and SMB share level permissions to Domain computers Read/Write.