Siebel File System access rights for Active Directory authentication

Hello,

We use OpenUI 14.16. We are swithching from db authentication to SSO. Bookshelf says:

If Active Directory authentication is implemented, then all users require read, execute and modify permissions to the Siebel File System \userpref directory to save their user preferences. In this case, when assigning rights to the Siebel File System, you must assign read, execute and modify permissions to the overall Siebel File System directory to everyone, assign read, execute and modify permissions to the \userpref directory to everyone, then restrict access to all other directories in the Siebel File System to the administrator and the Siebel service owner.