Server is running NW60SP5, and some users are getting all rights to
SYS:PUBLIC; they should have only RF. Elevated rights have not been
assigned to any users, groups or contexts.

What's the least intrusive way to correct this with DSREPAIR? Repair the
volume or specific users, or any other suggestions?