Samba4 sysvol directory permissions?

[Jeff Sadowski]

I realized this morning that my samba machines sysvol had stuff in it
that was not on my windows2003 DC. It had viruses in its sysvol that
I'd like to prevent what ever is putting them there from putting them
there.

I have that virus that puts the following files
autorun.inf
pornmovs.lnk
myporno.avi.lnk
setup50045.fon
setup50045.lnk

I'm not sure where the infection is but how do I determine permissions
for sysvol on my samba4 server?
So that I may be able to lock it down?