(How is least privilege implemented? NTFS system permission settings Before use, add the Administrators user to each hard disk root as full permissions (optional SYSTEM user), delete other users, and enter the system disk: permissions are as follows: C:\WINDOWSAdministratorsSYSTEM user full permissions Users user default permissions are not modified Delete the Everyone user from other directories, keep in mind that the AllUsers\DefaultUser directory and its subdirectories under C:\DocumentsandSettings, such as C:\DocumentsandSettings\AllUsers\ApplicationData directory default configuration retains the Everyone user permissions)