Setting up a GPO to give a Local Group Access to local file system

Posted on 2006-05-25
Last Modified: 2010-04-18
I need to grant certain developers & support personnel read/write access to the local file system (C:\ and D:\).  I need to do this on about 10 servers and I would like to setup a local group named 'ProductionSupport' that will be granted read/write acess to the local disks via GPO.  This way if I need to do this on many servers in the future all I would need to do is create a local 'ProductionSupport' group and populate it with the appropriate domain users.  How do I accomplish this?
Question by:bangia_v
    LVL 16

    Expert Comment

    Well from the sounds of it they need to be probably power users of the local machine or is that too much power for those developers for you?  If you just want them to be users only and have write/read access then you can use xcacls or cacls.  Xcacls is more poweful than cacls and you will have to download it, it's free if i'm not mistaking.

    An example of adding a domain security group to the local machine is this.

    net localgroup "power users" domain\security_group /add

    You can just add that command in a batch script and then link the gpo to the OU that those 10 servers are in.  That command will add the security group you chose to replace "domain\security_group" to the power users of that local machine.

    That would be the easiest if you didn't care if they were power users on the machine and if you could create a GPO and link it to the OU's that the servers are in.

    If not then use xcacls or cacls.  It's not really hard to use those programs to give specific groups access rights to files, folders, etc....



    Author Comment

    One question.  Do Power Users have the ability to stop/start services?
    LVL 16

    Accepted Solution

    Yes.  Here is also a link that gives you a list of what they can and cannot do.



    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    Join & Write a Comment

    The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now