JSI Tip 2294. OemPreinstall=Yes improperly sets permissions on the Documents and Settings folder.

If the answer file of your unattended Windows 2000 install contains OemPreinstall=Yes, permissions on the Documents and Settings folder are set to Full Control for the Everyone group.

NOTE: The only sub-folders effected are the Default and All Users folders.

Use CACLS to set the permissions to:

        Administrator = Full Control
        Everyone = Read
        Power Users = Read/modify
        System = Full Control
        Users = Read