JSI Tip 2294. OemPreinstall=Yes improperly sets permissions on the Documents and Settings folder.

If the answer file of your unattended Windows 2000 install contains OemPreinstall=Yes, permissions on the Documents and Settings folder are set to Full Control for the Everyone group.

NOTE: The only sub-folders effected are the Default and All Users folders.

Use CACLS to set the permissions to:

        Administrator = Full Control        Everyone = Read        Power Users = Read/modify        System = Full Control        Users = Read