Server.xml permissions on W2k3 server. Users have R and E rights. Is that ok?

Hi! What's the default user permissions to the Server.xml file on a Windows 2003 MS? Is read and write appropriate or a security risk? Thanks!