• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 152
  • Last Modified:

How to push local file rights out via domain login

I have a few school districts that run a piece of software which require the students to have read and write access to certain files and folders on the local workstation.  Is there any way this can be done via a logon script or group policy so that we do not need to revisit every machine?
0
JCRussell
Asked:
JCRussell
  • 2
2 Solutions
 
Netman66Commented:
Use the tools CACLS.exe and place it in a logon script.  You can customize the logon script if necessary to use another tool - ifmember - to determine group membership.

0
 
grayeCommented:
The suggested way to change Access Control Lists via a GPO, is to create a custom security template (using the Security Analyzis and Configuration snap-in).  Then you apply this template via a GPO.

You can view some of the existing templates (with notepad) for examples, if you want to build a template by hand (it's not that hard).

BTW:  There is a section in the GPO editor that says "File System"... but it doesn't do what you think it'd do... ignore that.
0
 
JCRussellAuthor Commented:
graye,
Where do I get the Security Analyzis and Configuration snap-in?
0
 
grayeCommented:
I usually use add that "snap-in" to the Microsoft Management Console (MMC).... although there are other ways!

from the run command (at the start button), type mmc
then "Add/Remove Snap-in" from the File menu
press the "add" button to get a list of standalone snap-ins
select Security Configuration and Analysis (and/or Security Templates)

If you're not familiar with security templates (some of the terms/concepts are somewhat counter-intuitive), I'd consider reading a lot of background information from the Microsoft web site, before proceeding.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now