Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Setting up a GPO to give a Local Group Access to local file system

Posted on 2006-05-25
3
Medium Priority
?
186 Views
Last Modified: 2010-04-18
I need to grant certain developers & support personnel read/write access to the local file system (C:\ and D:\).  I need to do this on about 10 servers and I would like to setup a local group named 'ProductionSupport' that will be granted read/write acess to the local disks via GPO.  This way if I need to do this on many servers in the future all I would need to do is create a local 'ProductionSupport' group and populate it with the appropriate domain users.  How do I accomplish this?
0
Comment
Question by:bangia_v
  • 2
3 Comments
 
LVL 16

Expert Comment

by:Kevin Hays
ID: 16766001
Well from the sounds of it they need to be probably power users of the local machine or is that too much power for those developers for you?  If you just want them to be users only and have write/read access then you can use xcacls or cacls.  Xcacls is more poweful than cacls and you will have to download it, it's free if i'm not mistaking.

An example of adding a domain security group to the local machine is this.

net localgroup "power users" domain\security_group /add

You can just add that command in a batch script and then link the gpo to the OU that those 10 servers are in.  That command will add the security group you chose to replace "domain\security_group" to the power users of that local machine.

That would be the easiest if you didn't care if they were power users on the machine and if you could create a GPO and link it to the OU's that the servers are in.

If not then use xcacls or cacls.  It's not really hard to use those programs to give specific groups access rights to files, folders, etc....

regards,

kshays
0
 

Author Comment

by:bangia_v
ID: 16792513
One question.  Do Power Users have the ability to stop/start services?
0
 
LVL 16

Accepted Solution

by:
Kevin Hays earned 375 total points
ID: 16792607
Yes.  Here is also a link that gives you a list of what they can and cannot do.

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/windows_security_default_settings.mspx?mfr=true

regards,

kshays
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
Learn about cloud computing and its benefits for small business owners.
Despite its rising prevalence in the business world, "the cloud" is still misunderstood. Some companies still believe common misconceptions about lack of security in cloud solutions and many misuses of cloud storage options still occur every day. …
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question