The Fact :

I have a Windows 2000 and 2 NT Server.
My first NT Server is PDB on C/D Drive and a file server on E Drive.
My second NT Server is BDC, Print Server on C Drive and File Server on D Drive.
My Windows 2000 is Mailserver with Exchange 5.5, IIS running (With Lockdown Tool).
Except administrator, nobody is logging locally or remotly (For Windows 2000) on the machine.

Question :

Can I safely reset all the file permission to Admin and System to Full Control for ALL File? That mean taking the C Drive File Permission, changing them so only Admin and System have Full Control and applying them to all child objets.

I know that I need to do some exception.

1) Print directory on second NT Server
2) Exchange Directory on the Mailserver.
3) IIS Right on a few file (Inetput and Windows/system32)

Possible or not?