GPO or Batch File: Change Permissions on Local Folder

Posted on 2008-11-17
Last Modified: 2012-06-27
I recently rolled out a large application to 135 end-users. Come to find out that specific permissions need to be set on the local install root. I do not want to remotely connect to 135 systems for obvious reasons. Is there a way to push out a GPO or BATCH to give everyone permissions to a "C:\Program Files\Application" directory?
Question by:ValleyENT
    LVL 31

    Accepted Solution

    Create a GPO configuring the permissions with
    Computer Configuration\Windows Settings\Security Settings\File System
    Right-click and choose 'Add File'
    Navigate to folder or enter it manual in the input box if it doesn't exist on the current computer.
    Click ok and set the permissions and close the dialog.
    Link the GPO to the OU with the computer objects.
    LVL 35

    Expert Comment

    by:Joseph Daly
    Or if you wanted to do it via batch file you could do it this way using the CACLS command.

    Link to CACLS switches
    cacls "c:\folder" /t /e /g users:F

    Open in new window


    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Starting in Windows Server 2008, Microsoft introduced the Group Policy Central Store. This automatically replicating location allows IT administrators to have the latest and greatest Group Policy (GP) configuration settings available. Let’s expl…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now