Replace lost permissions on W2K file system

First of all, I am an MCSE, no need to get basic.

I am working on a Windows 2000 server, which has
ALL of the security on ALL of the files and folders set
to "Everyone Full Control." Aparently all are being set
by inheritance from the default root setting.

I am presuming that a virus has deleted all of the
explicit DACLs from all of the file system objects to
achieve this. (I'm not a programmer, but that seems
to be the only way to do this in W2K. In NT it was
common for a "newbie" to set a permission at the
root, click "change all directories and subdirectories, "
and have this calamity happen, but that is not the way
they do it anymore, in W2K.)

Back in the NT Days, there was a utility (I believe in the
Reskit) that could reset all of the default system
security settings, and I have used it a couple of times,
but I can't find it or a W2K version again.

I believe it would be possible to do this with an AD
GPO, but that looks like a nightmare that would live
on, long after the security settings job is done.

Anybody know what I am looking for and where to
look? (Please also reply to my direct email address)

Thanks
Will Harper, MCSE (NT & W2K), CTT+
harperwill@cavtel.net

 

Import the default security template Basicsv.inf

 

I considered using the BasicDC.inf, but it only has a very few file and folders settings (and it has to be imported at the OU GPO). Comparing that to the setup security.inf, you can see that there are hundreds (thousands) more file and folder settings in it.

The reason I'm looking for a one-time command line fix, rather than a policy change; it appears that the policy is empty by default (e.g. only a place to deviate from the default settings from setup security.inf). I'm afraid that if this GPO policy must be applied to EVERY DC every time one starts, it may take forever to start a machine.

Do you have any experience with this bear???

Will