|
Posted by Steven L Umbach on September 13, 2005, 7:42 pm
If you were Registered and logged in, you could reply and use other advanced thread options
You could use a Group Policy "startup" script that uses the cacls command to
change permission on the folder being sure to use the /e switch to edit
current permissions so as to not remove current permissions for other users.
Otherwise you can use Group Policy computer configuration/Windows
settings/security settings/filesystem to change and enforce ntfs permissions
on a folder. Right click file system and select add file to get started. If
you consider file system be sure to do it at the OU level and NOT at the
domain level so as to not affect domain controllers and other computers that
do not need the setting. You can create an OU to move the computer accounts
into. Be sure to test file system on a test computer in the OU to make sure
results are as expected before you roll out. If you try to "browse" to the
folder when you configure file system you may not find the folder if it does
not exist on the computer where you are configuring file system but you can
simply enter the path. --- Steve
http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=/resources/documentation/windows/2000/server/reskit/en-us/core/fncc_fil_fboy.asp
--- cacls info
> Hi,
> Here is my problem. I'm working on the Group Policy in Windows 2003. All
> users on my domain (excepts Administrator) have a restricted access to
> their
> "C:"-->read only on their XP computer(I didn't do anything for that).
> There
> is a user groupe that needs to write in a subfolder of "C:\Program files".
> Is there a way to change the access of that specific folder without having
> to
> modify the access on each XP computer?
>
> Thanks
>
> Mathieu
| 
XML site map