Suggested NTFS Permissions on Repositories

[cffit]

What are the minimum/suggested NTFS security settings on a folder that servers as a repository on a Windows server?

[dellock6]

I've never checked deeply this topic, but Veeam DataMover Service runs as Local System so I think at the very minimum SYSTEM needs to have modify rights on the folder and children objects (it creates one sub-folder per job).

[cffit]

The reason I ask is because by default "ServerName\Users" group has access to all folders on the server. I realize that alone doesn't give any domain user access to the backup files, but it seems like the repositories should be somewhat locked down to only minimal user access.